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XML: RISE OF THE MACHINES 

Need for acceleration, security spawns 
crop of dedicated hardware devices 

with the same information in 



BY EDWARD J. CORREIA 

As XML is evolving to become 
the language of choice for busi- 
ness-to-business integration, a 
number of hardware vendors 
have stepped in to help acceler- 
ate the processor-intensive lan- 
guage and to bolster security. 
Without exception, 
the devices are being 
positioned as devel- 
oper aids. 

One of the earliest 
vendors to tout the 
need for XML accel- 
eration was DataPow- 
er Technology Inc., 
which released its 
first in mid-2002. 

Eugene Kuznetsov, 
company founder, 
chairman and CTO, 
said that XML and 
SOAP are inherently slower 
than DCOM, CORBA and oth- 
er object models because XML 
is closer to text. "One of the 
basic issues is that if you express 
a DCOM or CORBA message 



thing 



XML, it will be 10 times larger. 
So you've already got a band- 
width and memory problem. 
Then processing the message 
takes a lot more cycles because 
nothing; is fixed-length, and 
like WS-Security and 
XML transformation 
are very processor- 
intensive." 

What makes XML 
slow, Kuznetsov ad- 
mitted, is also what 
makes the language 
attractive to develop- 
ers. "It's flexible, text- 
based and human- 
readable, interopera- 
ble and extensible. 
code, says Reactivity's Those features in any 




Developers should not 
have to write security 



Kaufmann. 



specification lead to 
additional processing 
overhead." Kuznetsov explained 
that, in general, XML accelera- 
tors work by intercepting 
SOAP messages and performing 
schema and security validation, 
► continued on page 16 



SurTs JCP 
Releases 
J2EE 1.4 

Supports WS-I Basic Profile, 
but available only to licensees 



BY YVONNE L. LEE 

Sun Microsystems Inc.'s Java 
Community Process has come 
out with what the company calls 
a qualification release of Java 2 
Enterprise Edition, version 1.4, 
with a general release of the full 
platform due by November. 

J2EE 1.4 includes tests and 
reference information for com- 
plying with the Web Services 
Interoperability Organization's 
Basic Profile 1.0, which pro- 
vides guidelines for creating 
interoperable Web services. 

"In practical terms to devel- 



opers, it means that they now 
can have the confidence that 
when they are developing a 
J2EE-based Web service, it will 
support the highest level of 
interoperability that the industry 
has defined," said Mark Hapner, 
Sun's Web services strategist. 

Earlier this year, the JCP 
decided that the next release of 
J2EE should incorporate the 
WS-I Basic Profile, but that 
release hit a snag when the 
Basic Profile itself was delayed 
from its expected June final 
► continued on page 24 



SUN REBRANDS SUN ONE 

At its SunNetwork conference in San Francisco in mid-September, 
Sun unveiled a new branding strategy for its software products: 



WAS 



NOW 



Project Orion and Sun ONE servers Sun Java Enterprise System 



Project Mad Hatter 



Sun Java Desktop System 



Sun ONE Studio 



Sun Java Studio 



J2ME-based mobile software Sun Java Mobility System 

Java Card authentication Sun Java Card System 

N1 (grid software) N1 

The Sun Java Enterprise System stack will be priced at a flat US$100 
per employee per year. The Sun Java Desktop System and Sun Java 
Studio offerings are add-on licenses to the server software, at $100 
and $5 per employee per year, respectively. 



C++ Builder X: Back 'With a Vengeance' 

Java f pluggable compilers aid Borland's assault on market 



BY ALAN ZEICHICK 

Forget humdrum version num- 
bers: The successor to Borland 
Software Corp.'s C + + Builder 
6.0 integrated development 
environment goes by the name 
"X," as in C + + Builder X. 
That's a letter X, pronounced 
"ex," as opposed to the Roman 
numeral X used in Mac OS X, 



pronounced "ten." 

Got that? 

But there's more to the new 
IDE than the letter; after years 
of neglect of the language by 
Borland in favor of C# and Java, 
C++ Builder X was rewritten 
from the ground up, according 
to J. P. LeBlanc, vice president 
and general manager of Bor- 
land's C + + solutions group. 

"We're going back into the 
C++ market with a vengeance," 
he claimed, "and we're going 
after the entire market. Over the 
years our product was focused 
on Windows developers build- 
ing GUI solutions; this product 
is taking a step back, and is aim- 



ing at the entire C++ market." 

In fact, the IDE, LeBlanc 
said, "adopted an IDE frame- 
work, internal to Borland, 
which is also used by JBuilder." 
That 5-year-old Java-based IDE 
gives C++ Builder X some of its 
new features, such as pluggable 
compilers, project files stored 
in XML documents, and com- 
patibility with Borland's other 
tools, such as Teamstudio col- 
laboration software, CaliberRM 
requirements manager and the 
Together modeler. 

Because the Java IDE code 

is portable, said LeBlanc, for 

the first time C + + Builder runs 

► continued on page 25 



SUN'S JOY 
STEPS DOWN 

BY ALAN ZEICHICK 

One week before Sun Micro- 
systems Inc.'s mid-September 
SunNetwork conference in 
San Francisco, the company's 
famed chief scientist, Bill Joy, 
announced his departure from 
the company. His role of top 
► continued on page 24 




Bill Joy, left, has departed; Greg 
Papadopolous moves up. 
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• Avoids multiple revisions of unreadable requirements documents; 
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■ Visualizes the Impact at requirements changes through a vartety 
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■ Prioritizes by business need ... no guessing what's important or 
making assumptions 
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Borland Suite as welf as other best-in-elass products 
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Oracle Scales Out, Just Not Up, With Grid Plan 

New 10g database and application server expected before the end of the year 



BY ALAN ZEICHICK 

SAN FRANCISCO — Grids, 
grids, grids, grids. Oracle Corp. 
could talk about little else at its 
annual Oracle World conference, 
held here in mid-September. 
The event, which focused heavi- 
ly on application development 
and database adminis- 
tration, served as the 
official announcement 
venue for the forthcoming Ora- 
cle lOg database and application 
server, which according to com- 
pany CEO Larry Ellison will 
ship "this year." 

The focal point of the new 
releases will be Oracle s new grid 
infrastructure. Oracle envisions 
enterprises deploying their IT 
infrastructure in three separate 
grids: one focused on storage, 
one on the Oracle database, and 
the third on the Oracle J2EE 
application server. All three grids 
will be managed by a central 
console, also provided by Oracle, 
that will assist administrators in 
allocating and reallocating the 
grid's resources for special appli- 
cation, database or server needs. 

In his keynote address 
announcing the lOg products, 
Ellison pledged that applica- 
tions that run on Oracles app 
server, or which use its data- 
base, will run on the new grid 
architecture. "Not a single line 



ANALYSIS 



of code" will have to be 
changed, he said, since to other 
software, a grid of servers run- 
ning the Oracle database will 
look like one giant instance of 
the database. The same will be 
true of the app server grid and 
storage grid, he continued, 
adding that the illusion 
of a grid appearing to 
be a single monolithic 
server will lead to significant 
ease of administration, and 
therefore lower operating costs. 
The real benefit of the grid, 
said Ellison, is scalability. While 
monolithic multiprocessing ser- 
vers with 32, 64 or 128 proces- 
sors can cost millions of dollars, 



grids can be assembled out of 
low-price commodity servers 
using the Intel x86 architecture, 
at a price of approximately 
US$5,000 per server, he said. 
And unlike high-end SMP boxes, 
such as those sold by IBM and 
Sun, they can be expanded easi- 
ly, one server at a time — to a lim- 
it of hundreds or thousands of 
servers. By contrast, Ellison 
argued, when you've tapped out 
the high end of an SMP server 
line, there's no place to go — but 
outward, to a grid or cluster. 

While Ellison enjoyed throw- 
ing out the $5,000-per-server 
price for grids, it soon became 
► continued on page 18 
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Larry Ellison tells OracleWorld attendees that applications won't have to 
be rewritten to run on the new grid architecture. 



Oracle Previews J2EE 1.4 Container 



BY ALAN ZEICHICK 

As J2EE 1.4 inches closer to the 
finish line, some vendors can't 
help but sprint past Sun's Java 
Community Process. Take Ora- 
cle Corp., which has just posted 
a preview version of its Oracle 
10g app server designed to be 
compliant with the draft speci- 
fication, as well as the Web Ser- 
vices Interoperability Organiza- 
tion's Basic Profile 1.0. 

The developer preview of 
the Oracle lOg app server, at 
otn.oracle.com/tech/java/oc4j 



/content. html, includes APIs 
for Enterprise JavaBeans 2.1, 
JavaServer Pages 2.0, Java Mes- 
sage Service 1.1, Java Connec- 
tor Architecture 1.5 and Java 
Management Extensions 1.2. 

Other J2EE app server ven- 
dors also are approaching J2EE 
1.4, but no one yet has a ship- 
ping product that even comes 
close to the specification. 

IBM's WebSphere 5.0.2, now 
shipping, works with the JDK 
1.4 client container, which the 
company says "is the first step 



toward J2EE 1.4 compliance." 
That release of WebSphere also 
works with the June 2003 draft 
spec of the WS-I Basic Profile 
1.0, according to IBM. 

Oracle's 9i AS, Release 2, 
BEA's WebLogic 8.1 and Sun's 
Sun ONE App Server 7.0 are 
focused on the J2EE 1.3 speci- 
fications, and their spec sheets 
do not reflect any of the newer 
J2EE 1.4 JSRs. 

The Java Community Process 
has released the source code for 
what it's calling a "qualification 



release" of a J2EE 1.4 app serv- 
er, which a spokesman described 
as "a release that enables 
licensees to qualify the code in 
advance of the final release [of 
the specification]." 

That qualification release is 
offered only as source code to 
Sun's J2EE licensing — that is, 
major vendors in the industry. 
"The source-code release in- 
cludes compatibility tests, allow- 
ing J2EE licensees to make 
progress on implementing J2EE 
1.4," according to Sun. I 



SPIRITWAVE REAL-TIME PUTS LOGIC WHERE NEEDED 

Combines messaging, caching and JMX to manage app grid 



BY EDWARD J. CORREIA 

Leveraging its existing messag- 
ing and data caching technolo- 
gies, Java middleware developer 
SpiritSoft Inc. has entered the 
grid computing market with the 
release on Sept. 30 of SpiritWave 
Real-Time, which the company 
says evaluates application usage 
patterns and deploys business 
logic where needed to make the 
most efficient use of network 
infrastructure and user need. 

"You can no longer statically 
configure the application server 
somewhere and it will stay 
there," said SpiritSoft CTO 
Robert Davies. "[Users] need 
the applications to move around 
and be closer to where the traf- 
fic is going to hit to maximize 
investment in infrastructure." 

Davies compared SpiritWave 
Real-Time to the software that 
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SpiritWave Real-Time's decision engine analyzes 
application data as it crosses the information bus 
and deploys business logic accordingly. 



controls Web farms, which "con- 
tinue to redeploy for load 
depending on where the hits 
come from. Companies are con- 
stantly having to adapt and 



change what they are 
doing, and they need 
their enterprise infra- 
structure to adapt and 
change at the same 
time, in real time." 

Davies said the 
new product com- 
bines the company's 
SpiritWave and Spirit- 
Cache messaging and 
caching middleware. 
"Typically our soft- 
ware would be push- 
ing data out and 
caching it where it is 
needed on the net- 
work. And we real- 
ized that we need to 
bundle SpiritWave and Spirit- 
Cache into one product." 

But the solution's secret 
sauce, he said, is SpiritSoft's 
implementation of the Java 



Messaging Extensions, or JMX. 
"We've architected JMX so you 
can logically group application 
servers together and manage 
them as a logical entity, or man- 
age all the clusters in an enter- 
prise as one logical entity." 

The benefit, Davies claimed, 
is the ability to manage an 
entire enterprise from a single 
location. "That's the key hook in 
real-time deployment because 
redeployment uses JMX to hot- 
deploy applications dynamical- 
ly. Any J2EE application server 
that supports JMX can control 
how we interact with the appli- 
cation server and how to move 
applications from one central 
point" to where they are need- 
ed on the network. 

The solution also will include 
Apache's Geronimo open-source 
application server, which Davies 



said is closer to completion than 
most people realize. "We have 
been contributing code to 
Geronimo, so we know how 
ready it is; it's almost there," and 
should be released by early 
October, he added. 

Davies explained that Apa- 
che's application server is better 
suited to the solution than was 
JBoss, which it had been supply- 
ing with its other middleware. 
"We were not heavily into the 
EBS [Enterprise Service Bus] 
concept. The way Geronimo 
models the message-driven 
bean architecture means that for 
us to piggy-back upon that to 
deliver the ESB solution is going 
to be a lot easier. It's better 
architected than JBoss." The 
ESB integration model uses 
messaging to move data 
between applications. Davies 
said the solution also has been 
tested with BEA's WebLogic 
and IBM's WebSphere. 

Pricing starts at US$6,000 per 
server processor. I 
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Qt, a middpladbim C++ application framework 
from Troll tech,, gives you an unfair advantage in 
reducing software development cost and chaos. 



Qt lets you: TR 

■ Write and maintain one application that runs 
-natively- on Windows, Linux* Unix, and Mac OS X 

■ Get your team up to speed quickly with built-in 
tutorials, examples, and superb documentation 

I Build a powerful C++ application with Qt s easy-to- 
use and elegant API 




Shorten GUI design time with Qt Designer 
Plug directly into your existing development 



envtmnment 
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Examine the source code, because with Qt, 
you get it all 



Don't take our word for it. Visit 



Vi 'm A.* 3 " "i I] H c-*.** ■ ^*.i J | n 



aiid read what our customers say about Qt, Then 
download die evaluation version and see lor 
yourself. 



Qt :THE UNFAIR ADVANTAGE INTHE RACE TO REDUCE SOFTWARE DEVELOPMENT CHAOS 

* HHE IraEhedi AS. All uwicvukh refjand mub aiirTPitt mafa mi du prapeiTp rfieir Htpacove omen. At E^tai memd. 



Software Development Times . October 1, 2003 



NEWS 



Microsoft: Put 
Away Your VBA 

Says VS.NET better for extending Office 2003 



BY EDWARD J. CORREIA 

For developers wanting to use Visual 
Studio .NET to extend Word and Excel, 
the wait will soon be over. When 
Microsoft Corp. on Oct. 21 ships Office 
2003, its new cadre of updated produc- 
tivity apps and servers, the company also 
will release Visual Studio Tools for Office 
System, which will permit developers to 
extend the latest versions of Word and 
Excel using C#, VB.NET and other sup- 
ported languages, and to exploit their 
newfound native XML capabilities. 

Microsoft also said it will continue to 
support Visual Basic for Applications 
(VBA) — the original way of extending 
Office applications — but will no longer 
advance that scripting language or its tools. 

Why replace VBA? "Because you get 
the full power of Visual Studio .NET, the 
benefits of writing with the .NET Frame- 
work, and you can use all the classes for 
data, calling Web services and file manip- 
ulation," claimed Robert Green, lead 
product manager for Visual Studio .NET 

Green cited drawbacks with VBA, 
including macros and other executable 
code that resided within a Word docu- 
ment or Excel spreadsheet. In the new 
paradigm, code is stored in a .NET 
assembly and linked into the document. 
"You could store that code on the net- 
work, and when the user opens the doc- 
ument the code automatically gets 
downloaded to their machine," which 
simplifies deployment and mainte- 
nance, he said. 

Separating the code from the content 
can help eliminate security risks, 
claimed Joe Andreshak, lead product 
manager for Office. "With VBA, some- 
one outside the company could e-mail 
me a document and 
execute code right 
on my workstation. 
The only protection 
the company has is 
my decision whether 
or not to run that 
code. With a Visual 
Studio Tools inter- 
face, if I am outside Microsoft will no 
the company and e- longer advance 
mail the document, it the old scripting 
points to code on a tools, says Green. 
server outside the 
company," which will run code only 
when requested from a trusted server. 

WHY TO EXTEND OFFICE 

According to Green, Visual Studio Tools 
for Office System provides several 
options for interfacing with Office appli- 
cations, the first of which is to build or 
modify stand-alone Windows applica- 
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tions to leverage functionality within 
Office. "For example, let's say you have 
an order entry application that is talking 
to a SQL or Oracle database that you 
built with [Visual Basic]. You might 
decide you need to do some reporting 
that you want to print using formatting 
features of Word, or do some calcula- 
tions or numerical analysis using Excel." 
Those interfaces now can be built with 
either Visual Studio .NET or VBA. 

For all this to work, Andreshak said 
client PCs need to have the .NET 
Framework installed, 
along with the prima- 
ry interop assemblies 
for each extended 
Office 2003 applica- 
tion. Interop assem- 
blies, he explained, 
ML are the software con- 
^J^B nectors that permit 
There are security .NET applications 
risks when using running inside Micro- 
VBA r says Micro- softs CLR to corn- 
soft's Andreshak. municate with COM- 
based Office apps. 
"Using the primary interop assemblies, 
they can use any language from Visual 
Studio .NET to code office solutions," 
he said. 

Word and Excel 2003 will be able to 
read and write XML documents, which 
Andreshak said will lead to greater reuse 
of document content. "XML makes it 
easier to pull data from back-end sys- 
tems into a document. Because the 
XML information is tagged, when Word 
receives it, it can be smart about what it 
does with the information. When you 
save, no longer is information locked in 
binary formats. You can stick a Word 
document on a file share for mining and 
more easily repurpose the information." 
Perhaps the greatest advantage of 
native XML support, Green claimed, is 
the potential for data exchange among 
disparate entities, akin to the interoper- 
ability benefits of Web services. "Just as 
my Web page can talk to my supplier 
without regard for what I write the page 
in or [what] the supplier wrote the supply 
system with, so too could my Excel 
spreadsheet talk to my supplier without 
concern for what the supplier [applica- 
tion] was written in. Everybody under- 
stands and can exchange [data] regardless 
of what the front end or back end was 
written in." 

Visual Studio Tools for Office System 
also will include Access 2003 Developer 
Extensions, Visual Basic .NET Standard 
Edition and SQL Server 2000 Developer 
Edition; pricing will be disclosed on the 
Oct. 21 launch date. I 
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Salmon Goes Mainstream 
With SOFIA 2.0 IDE Support 
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BY YVONNE L. LEE 

Consulting firm Salmon LLC 
in early September released an 
upgraded version of its J2EE 
framework that adds rich text 
components, integration with 
three development tools and 
greater customizability. 

Salmon Open Framework for 
Internet Applications (SOFIA) is 
a set of open-source components 
for developers to include in their 
Java projects. Developers can 
implement the code by adding a 
few lines that reference the 
SOFIA items stored on the serv- 
er. SOFIA includes JSP class and 
tag libraries of more than 40 
visual components, such as but- 
tons, navigation bars, data tables; 
and 20 nonvisual ones, such as 
internationalizations and a task 
scheduler. 

Salmon specializes in devel- 
oping custom Java and Web 
services applications. The com- 
pany, which has offices in New 
York, London and Sydney, Aus- 
tralia, developed the SOFIA 
components in the course of its 



consulting work, said Ken Hoff- 
man, vice president of sales. 

SOFIA 2.0 now works with 
rich text as well as HTML 
because it supports the Swing 
Set Extensions, said Dan Dubin- 
sky, lead SOFIA architect. The 
Swing components perform the 
data retrieval and validations. 

SOFIA integrates with 
Dreamweaver MX by adding 



plug-ins that produce extra 
menus and windows that Web 
designers can use to drop 
SOFIA components into Web 
sites just as they would other 
components. SOFIA 2.0 offers 
similar plug-ins for the IntelliJ 
IDEA 3.0 and Eclipse 2.1 IDEs. 
It continues to offer plug-ins for 
Apache's Tomcat open-source 
servlet engine. I 
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SOFIA now can be invoked from within Macromedia's Dreamweaver IDE. 



Borland Pushes Optimizeit to Distributed J2EE Apps 



BY YVONNE L. LEE 
AND ALAN ZEICHICK 

In early September, Borland 
Software Corp. released the 
second version of its Optimizeit 
ServerTrace performance-man- 
agement tools for distributed 
J2EE applications. The update, 
which the company is calling 
"Optimizeit ServerTrace 2 
DataCenter," focuses on mea- 
surement and analysis of appli- 
cations deployed across clusters 
and distributed J2EE environ- 
ments. It also has a new dash- 



board for real-time apps moni- 
toring, and can take snapshots 
of a systems performance for 
offline viewing and analysis. 

The biggest changes, accord- 
ing to the company, are focused 
on management of distributed 
J2EE apps. "Its all about multi- 
ple virtual machines, multiple 
app servers across the entire data 
center," said Bill Pataky, director 
of product marketing and man- 
agement. Optimizeit Server- 
Trace can now track Enterprise 
JavaBean and Remote Method 



Invocation calls across multiple 
Java Virtual Machines. 

The new dashboard, called 
System DataCenter, provides a 
single viewpoint designed to 
help developers trace perfor- 
mance issues down to individual 
J2EE components. "The goal 
there is to gather all this infor- 
mation and deliver a simple view 
into this entire complexity in a 
single dashboard," Pataky said. 

In addition, the product can 
now take static snapshots of the 
overall system at a particular 



instant in time, so that it can be 
analyzed in more detail later, or 
so that the performance can be 
compared across time during 
different load or deployment 
conditions. Borland is providing 
two tools to help analyze snap- 
shots: Optimizeit ServerTrace 
Reader lets developers examine 
a snapshot, and Progress Track- 
er compares snapshots to allow 
monitoring over time. 

Optimizeit ServerTrace 2 
DataCenter costs US$20,000 for 
each dual-processor server. I 
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Unicode 4.0 Represents Ancient Korean, Ugaritic 



BY YVONNE L. LEE 

Mathematicians, scholars and 
Asian writers will be able to 
express themselves more clear- 
ly through software, thanks to a 
new version of the Unicode text 
representation specification. 

Unicode specifies how to ren- 
der text. Many operating systems 
and all modern browsers use it; 
its more than 96,000 characters 
go far beyond encoding schemes 
such as ASCII and EBCDIC. 
Most applications don't have to 
program to the specification, but 
call on the operating systems 
text interpretation resources, 



explained Ken Whistler, Uni- 
code technical director. 

Unicode also is central to 
new internationalized domain 
names, which make it possible 
for people throughout the 
world to have domain names in 
their own languages, rather 
than just in the Latin character 
set on which English and most 
European languages are based. 

The biggest advance in Uni- 
code 4.0 is a more than dou- 
bling of the set of Chinese char- 
acters, some of which also are 
used in Japanese, as well as in 
Korean and Vietnamese litera- 



WHAT'S NEW IN UNICODE 4.0 



• Extensive additions of Chinese, Japanese and Korean characters 

• More than 900 mathematical and technical symbols 

• Individual characters, such as currency symbols, for other 
scripts, including Indie, Khmer, Latin, Greek, Arabic and Syriac 

• Improved specification of conformance requirements, incorpo- 
rating the character encoding model 

• Clarification of semantics of special characters, including the 
byte order mark 

• Major expansion of Unicode Character Database properties and 
of specifications for text boundaries and casing 

• More minority scripts 

• More historic scripts Source: Unicode Inc. 



ture, Whistler said. 

"In older Korean, they also 
use Chinese characters. You still 
find it in classic materials and lit- 
erature. It's not used in newspa- 
pers and billboards," Whistler 
said. "All those countries want to 
make sure all the Chinese char- 
acters that they use are there." 

Programs now also will be 
able to read and write the 
minority scripts of languages 
from China, India, the Philip- 
pines and Thailand. 

Mathematicians and scien- 
tists will benefit from more 
than 900 new symbols that have 
been added. Whistler said Uni- 
code Inc., the vendor con- 
sortium that oversees the speci- 
fication, worked with the 
Scientific and Technical Infor- 
mation Exchange (STIX) to nail 
down the new symbols and how 
to render them. STIX includes 
members from the American 
national societies for physics, 
chemistry, electrical engineer- 
ing and mathematics. 

Not only will scientists and 
mathematicians be able to 
publish more kinds of machine- 
readable documents, but so will 



their colleagues in the 
ancient humanities. 

"Since the last time 
we published, which was 
three years ago, there 
were a number of minor- 
ity scripts and historical 
scripts added," Whistler 
said. 

"We added Ugaritic. 
It's one of the Semitic lan- 
guages," Whistler said. 
"The ones used by the 
Babylonians and Sumer- 
ians is kind of big and 
complicated; we're still 
working on that. We'll be 
doing old Persian, which 
is another old cuneiform 
script. There's not much 
business interest, but it's 
certainly of interest to 
scholars." 

The official Unicode 
standard has been pub- 
lished by Addison- Wesley, 
of Reading, Mass., and an 
online version is available 
from www.unicode.org. 

"People who are doing appli- 
cation development, they're 
going to be relying on the oper- 
ating system," Whistler said. 
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"They need to know just general- 
ly what Unicode is all about. The 
book is pretty good in explaining 
that generically for people." I 
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, COMPANIES , 



Software security tools company Rainbow Technologies Inc. will be 
acquiring Chrysalis-ITS r a privately held security company in Ottawa. 
The purchase price was not disclosed . . . Sun Microsystems Inc. has 

upgraded its Solaris 9 x86 operating system by adding more than 100 
new components to its Hardware Compatibility List; it also has intro- 
duced a hardware certification test program. 



PRODUCTS 




eHelp Corp. has released a version of its RoboHelp help authoring tool 
for Adobe's FrameMaker technical writing software. Content can be 
composed in FrameMaker and exported to XML for use on a Web site 
or within an application . . . Version 3 of Zend Studio, the multiplat- 
form PHP IDE from Zend Technologies Ltd., now works with the PHP 
5.0 language, and includes a code profiler, static code analyzer and 
code completion. The editor also now highlights syntax errors 
. . . ComponentOne Studio for Mobile Devices, which went into beta 
testing earlier in the summer, is now generally available. The 
US$799.95 software from ComponentOne LLC provides Ul and other 
functions for Microsoft's .NET Compact Framework . . . NetMotion 
Wireless Inc. has upgraded its Mobility persistent connection tool for 
mobile devices. Version 5.0 has new mobile policy management func- 
tions and roamable VPN security. The software runs on Windows CE- 
based devices . . . Version 6.5 of Araxis Merge, a developers' file com- 
parison utility from U.K.-based Araxis Ltd., now 
creates comparison reports in HTML or XML for- 
mats. It also includes a virtual file system API, which 
allows the tool to be integrated into source-control 
or version-control systems. The software costs 
US$129, £87 or €122 per seat . . . Desaware Inc. is 
shipping its new Licensing System for .NET. The software uses 128- 
bit encryption to enforce software licenses for .NET components or 
applications, and costs US$495 per developer seat and $1,000 per 
license-management server . . . The Austrian company EC Software 
has updated its Help & Manual help-authoring suite. Version 3.3 of the 
US$279 tool can export help files in Win32 executable format and cre- 
ate PDF documentation files natively. It now includes an image editor 
and a tester for keyword indices, and can integrate with Borland's C++ 
Builder and Delphi . . . Zephyr Development Corp. is offering Passport 
Host Integration Objects, a set of ActiveX and .NET connectivity com- 
ponents for integrating TN3270 and TN5250 terminal emulation into 
Windows applications from VS.NET . . . The Czech firm Charonware 
s.r.o. has updated its CASE Studio 2 database modeler to work with 
Pervasive's V8 database, and to improve support for Oracle, SQL Serv- 
er, PostgreSQL and MySQL. Version 2.13 lite, which can draw entity 
relationship and data flow diagrams, costs US$165; the full version, 
which adds reverse engineering, costs $329 . . . Venetica Corp.'s 
VeniceBridge 5.0 content integration software now supports the cur- 
rent draft version of the Java Content 
Repository API, JSR-170, a JCP specifica- 
tion that defines a standard access for content repositories. The 
expert group predicts that JSR-170 will be completed this month 
. . . Dotlmage is a new server imaging component for .NET from Ata- 
lasoft Inc. The new component displays and manipulates high-resolu- 
tion color and black-and-white images, such as photographs and doc- 
ument scans. Pricing begins at US$329 . . . LogicLibrary Inc. has 
announced PVCS Asset Adapter, which allows the company's Logidex 
asset management system to discover artifacts in Merant's PVCS Ver- 
sion Manager. The company says that Merant's Dimensions will be sup- 
ported in early 2004 . . . Version 5.0 of Sims Computing Inc.'s Flux job 
scheduler now has a new GUI for creating, editing and monitoring jobs. 
There is also a new command-line interface, and better detection of job 
interdependences and error handlers . . . Inspireon Software LLC has 
released Partitioned Query for MySQL, a .NET component that 
brings parallelized queries to that open-source database. The compo- 
nent costs U$295 per developer . . . Codemesh Inc. has released Jug- 
gerNet 1.0, a .NET library that makes Java classes accessible to .NET 
applications. It includes a code generator for building .NET proxies for 
Java classes, and contains runtime libraries ► continued on page 24 



AppComposer Assembly Tool 
Reused in Broader Framework 



BY DAVID RUBINSTEIN 

Portland, Ore. -based start-up 
DigiSlice Corp. last month 
announced it is planning to use 
its AppComposer 3 tool as the 
cornerstone of a new applica- 
tion framework. The forthcom- 
ing Digital Asset Factory will 
provide generic, customizable 
applications that are assembled 
from reusable components. 

DigiSlice was founded in ear- 
ly 2002 by Wm Leler, who origi- 
nally helped create Application 
Composer while at a company 
called Zat, which was acquired 
by the now-defunct Web Gain 
Inc. After a year in which it basi- 
cally got sidelined, Leler said 
WebGain called him to buy back 
the technology in August 2002. 

"When they bought Applica- 
tion Composer, it was a beta," 
Leler said. "They spent time 
productizing it, and by the time 
of its release, [WebGain] was 
focused on VisualCafe, and 
they reassigned developers 
from Application Composer to 
VisualCafe. Then, when Appli- 
cation Composer was ready to 
go, they filed to go public and 
entered a quiet period, so they 
couldn't talk it up." It was short- 
ly after that filing in June that 
WebGain ceased operations. 

So after spending time that 
Leler described as "putting it 
back together," which included 
updating its included version of 
the JBoss application server and 
replacing the PointBase data- 
base with one from Hypersonic, 
AppComposer has been made 
available again for free and in a 



paid enterprise edition with two 
key new features. 

The first is that the tool uses 
Java as its scripting language, 
enabling developers to rewrite 
any Java statement on-the-fly, 
recompile it and update the 
application while it is running, 
Leler said. "You can drop in any 
Java program as a script," he 
said. "It gives the advantages of 
a compiled language, such as 
finding typing errors in compil- 
ing rather than after the appli- 
cation is up and in production." 

The second key feature, he 
explained, is automatic boxing 
and unboxing of primitives to be 
objects. "Sun is putting that into 
all 1.5 editions of Java," he said. 

DigiSlice CEO Joonees K. 
Chay said the company is work- 
ing with Macromedia and Bor- 
land to bring AppComposer to 
the Dreamweaver and JBuilder 
development communities. 

In the long run, the company 
is working on Digital Asset Fac- 
tory. Leler said the approach 



goes one step beyond what he 
called the "kit mentality" that he 
said is used at Flashline and oth- 
er component-reuse and Web 
services solution vendors. "Peo- 
ple want a specific enterprise 
application to be customizable 
to work in their business," Leler 
said, not to have to try to assem- 
ble an entire enterprise applica- 
tion from scratch. 

As an example, he cited a 
company buying a packaged 
CRM system, and finding out 
after outlaying a huge chunk of 
money that one of the modules, 
say for customer support, doesn't 
fit its business needs. 

Currently, DigiSlice has two 
e-commerce applications up and 
running — one for DVD rental 
and one for trading mutual 
funds — and expects to have 
more later. "We want to take the 
components that exist in our 
library and bundle them into 
generic or prototype applications 
that can be customized quickly 
and inexpensively," Leler said. I 




Joonees K. Chay, left, and Wm Leler are putting together a framework for 
assembling applications from reusable components. 



TEAMSTUDIO ADDS JAVA TESTING TOOLS 



BY YVONNE L. LEE 

Teamstudio Inc., a company 
that once was dedicated to cre- 
ating tools for Lotus Notes and 
Domino developers, is intro- 
ducing two new Java-focused 
performance testing tools in the 
first week of October. 

Both tools are designed to be 
used prior to deploying an appli- 
cation, said Nigel Cheshire, CEO 
of the Beverly, Mass., company. 

Performance Profiler moni- 
tors the code as applications run, 
locating performance bottle- 
necks in Java code, and identifies 
where the application spends 



most of its time, making it easier 
to optimize the application. 

Memory Profiler looks at sec- 
tions of an application as it runs, 
pointing out objects that were 
created but haven't been freed. 

Memory leaks can happen in 
Java when objects are created 
that rely on other objects, and 
those dependencies aren't 
resolved, Cheshire said. 

"The common situation in 
Java is where you attach a lis- 
tener to an existing object and 
you don't remove that listener," 
Cheshire said. 

Trimming the memory losses 



can trim the size of the applica- 
tion and make it perform better. 

Both products have plug-ins 
so that they can be used from 
within Borland's JBuilder and 
IBM's Eclipse and WebSphere 
Studio Application Developer 
environments. 

"A profiling run will show 
within the IDE," said Cheshire. 
"There's no extra configuration; 
you're not launching any other 
applications. [The IDE] starts 
the profiling run as you would a 
launch or debug." 

Both products are priced at 
US$495 per developer. I 
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ArcStyler Now Powered 
By Own UML Engine 



BY DAVID RUBINSTEIN 

This week, Interactive Objects Software 
GmbH is expected to upgrade its Arc- 
Styler modeling tool; version 4.0 of the 
Model Driven Architecture tool has been 
completely rewritten with its own UML 
engine and with the ability to adapt to 
other types of modeling tools. 

With the new release, Interactive 
Objects has replaced 
IBM's Windows-based 
Rational Rose modeler 
with a new cross-plat- 
form embedded UML 
engine, based on 
No Magic Inc.'s Magic- 
Draw modeler, which 
the company custom- 
ized for its own use. 

"We had been bound 
to the Microsoft plat- 
form for development 
because of Rose," said 
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MDA cartridges that can create 
Interactive Objects CEO model transformations are being 
and founder Richard submitted to OMG. 

Hubert. "Rose only 
worked as an open tool with COM 
objects. It was a completely different tool 
on Unix. With MagicDraw, the integra- 
tion is much more complete than it ever 
was with Rose. The UML tool is now just 
a part of the MDA console," he explained, 
saying that users will no longer have to 
toggle back and forth between Rose's edi- 



tor and the ArcStyler environment. 

A Tool Adapter Standard API allows 
users to embed other modeling tools, 
such as those for business object model- 
ing, into the platform, Hubert said. 

ArcStyle 4.0 also includes an open 
repository accessible via Java Metadata 
Interface (JMI) APIs, to gain modeling 
information with Java. When extending 
MDA for specific mod- 
eling types, ArcStyler 
will automatically gen- 
erate extensions to 
the repository and to 
XML Metadata Inter- 
face (XMI) inputs and 
outputs. 

Interactive Objects 
has designed its own 
MDA plug-in cartridges 
to create transforma- 
tions such as business 
model to technical mod- 
el, or business layer 
model to presentation 
layer model, and is sub- 
mitting the concept to the Object Man- 
agement Group Inc. consortium for con- 
sideration as an adopted technology. 

The company also has created a portal 
(www.mda-at-work.com) for providers of 
MDA cartridges, so that ArcStyler users 
can reuse the cartridges in their projects, 
Hubert said. I 



fc v i : ■Wiirt I m? ta s r ! s fc i"l **■ ! ^lyr 



Microsoft PDC to Rope 'Longhorn' 

Successors to Windows, VS.NET on display 



PDC 



BY ALAN ZEICHICK 

Just when developers are 
becoming familiar with 
Windows Server 2003 and 
Visual Studio .NET 2003, 
it's time to look to the next 
generation of Microsoft 
Corp. products at the com- 
pany's Professional Devel- 
opers Conference, sched- 
uled for late October in 
Los Angeles. The stars of 
the show: "Longhorn," the 
next version of Windows; 
"Whidbey," the accompa- 
nying version of VS.NET; 
and "Yukon," the successor 
to SQL Server 2000. 

Sharing the spotlight 
with the code-named soft- 
ware will be Bill Gates, 
who along with a variety 
of Microsoft senior vice 
presidents will be presenting keynotes 
and general sessions at the conference. 
Richard Rashid of Microsoft Research, 
Eric Rudder of the server and tool 
group, Jim Allchin of the platform group 
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CONFERENCE: Oct. 26-30 
Los Angeles Convention Center 

EXHIBIT HOURS: 

Monday, 11:30 a.m.-2:30 p.m., 

5:30 p.m.-8:30 p.m. 
Tuesday, 10 a.m.-4 p.m. 
Wednesday, 9:30 a.m.-2 p.m. 

CLASSES: 

Sunday, 10 a.m.-5:45 p.m. 
Monday, 10 a.m.-5:45 p.m. 
Tuesday, 8:30 a.m.-5:30 p.m. 
Wednesday, 8:30 a.m.-6:15 p.m 
Thursday, 9 a.m.-2:30 p.m. 

KEYNOTE SPEAKER: 
Monday, 8:30 a.m.-10 a.m., 
Bill Gates 

www.microsoft.com/pdc 



and Gordon Mangione 
from the SQL Server team 
will be presenting their 
latest products and vision 
during the five-day event. 
The Microsoft Profes- 
sional Developers Confer- 
ence is an annual event, 
though it's held only bian- 
nually in the United 
States. The 2001 confer- 
ence also was in Los Ange- 
les in October; last year's 
event was held in Sao Pao- 
lo, Brazil, in May. 

This year's event will 
include preconference 
sessions on data access, 
.NET development and 
Windows internals. The 
six conference tracks are 
dedicated to architecture 
and Web services, client 
applications, languages and tools, mobile 
devices, servers and Web applications 
development. There are about 120 tech- 
nical sessions scheduled for the confer- 
ence in these tracks. I 
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Your application deserves a rock solid presentation. 

You've invested a great deal of time Into your product development. 

Now, give it the look you want without going over budget! 



Xtreme Toolkit Pro can give your application 
a professional looking GUI in minutes! 

"the easiest to use tools on the planet..." 
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Code Swapping Goes Corporate 



Start-up Artifact offers software for enterprises to share, reuse assets 



BY DAVID RUBINSTEIN 

With the Internet have come a 
number of Web sites that soft- 
ware developers are frequenting 
to find and download code to use 



in their applications. 

But corporate IT managers 
might not even be aware that 
their developers are importing 
code into the organization — 



code that is written in many 
cases by unknown individuals 
under uncertain processes and 
that hasn't been reviewed. 

Artifact Software Inc., a Balti- 



more-based start-up, last month 
began offering an enterprise 
code-sharing solution, called 
Artifact Server, that allows IT 
organizations to control how 



ActiveReports™ for .NET-Think Outside the Box. 



100% C# Reporting Engine and a Fully Integrated Designer 



Inregrgled fodtK**^— 

TmboK IntBgtfion label, 

Tpxboa, &&&&, 

: i :_>:- -ire Shape, 

Rich Mm 

Sub-report P-ngeErffiA, 

Barcode Die Object 

md Custom Cuntroli 

Easy to ir«, bonded, fully 
nfegntfed report deeper 
Rifwn Hwaef and f aatsr , 
3age Header wd Fewer, 
Gf<*ip4 Kb*?.- together 
artrd 

Onlln* b#p -end dato'led 
irukiKtiofu 

■ — 




Buill in lepftsr wiioidi 
and ccwiwt-. 

Regwri and Field 
EKpWet 



Dynamic Help 



CE Piopp^ 







Carplefe Code integration Use 
VS.NET editor to wfirtioAs 
behind your reports in C# or 
VBNET UubniledFleicibil^ 



Easy \d y&B Separi Wizard helps 
yOU fl*i itort?* trtrmng slr^nl- 
repcrft rfier- customize [fieri uvnq 
»he irttegrfji&d d«igW 



Canv&riiafi wizard h* pi ^ou ccn- 
vcrl flxisling Accttt rapark l& 

Adwstepsfli for .NET. 



ASP. MET Sflfvnr Control fv?:** 
yw wtilp to*rtfcpofh , *£b 
clier vie^ef apria\5 JhTWi. 

Aclr^i. N^T gnd RDF vipiflij. 







n 




t ^-^ — 







#- 



W!n?a™ Viewer 
C&fl|f*l. Spill ntftf*, 
muhkjoge view, lext 

«Errh sciblfinl rf.iSKrfo 
customizable ^odba - . 

ExjMrt toAdatet&Bfj 
Mienttflll E«l. "Rich Wf, 
HTM, Tex* and TIFF 
Image* 



Roydlty Fr» End Urt* 
Report Designer. ih^-5 
ft H7W end fl^iiNilycF 
Ariv^fteporti -aesigra- *in 
ycvcrJuttn 



Vitw yQuf report* Ofl ** 
intemerwirtiihe hlfot 
viewer cwbd, AcHvtK 
www control, .NET 
i*e**i coflhel pr Aaobal 
Keoder. 



^fiyeR 



Got data? Shaw ill 

DATA 



DYNAMICS 



Control Yburself. 

ww w.datady namic ft.COffl 6 1 4.B95.31 42 fa * 199.2943 

^11 FrfrdvmCrka and ritpiJvriBd hndew^rrl.1 fe" prndurt r"v %c"iprniitH r¥^-rt^n«l herein arn ^ sn^wy J iWr Fwpediwn rTwrorv 

' co^ff* AW? ft™ C^iHH^'n 



code is shared or reused. The 
company also offers a hosted 
version of the product, called 
Artifact Network, for develop- 
ment organizations that don't 
want to host their code-sharing 
software. 

Artifact Server, according to 
CEO and co-founder Mark 
Wesker, provides a central repos- 
itory for an organizations in- 
house code-sharing network. Its 
companion Artifact Desktop is a 
.NET application that can be 
plugged into Microsoft's Visual 
Studio .NET, enabling develop- 
ers to share code snippets or 
fragments without leaving the 
IDE, according to Wesker. The 
free server, which has been up 
for about a year, has 18,000 reg- 
istered users, he said. "Our focus 
is on just a code-sharing net- 
work. We do not drive what 
they're sharing or using," he 
added, referring to advocates of 
component reuse who take a dif- 
ferent approach. 

Acknowledging there is some 
overlap with CollabNet, which 
offers the SourceCast collabora- 
tive development framework, 
Wesker said CollabNet's focus is 
broader, encompassing project 
management and version control 
among other features. 

Artifact Server, which is avail- 
able for a US$500 per-developer 
client access license, has a built- 
in search engine, which gives 
users an option to search the 
Internet partner sites for code or 
to limit the search to within an 
organization, explained product 
marketing manager Mark Milli- 
gan. The search engine also can 
generate a full text index of the 
company's source codebase, 
which can be refined over time, 
he said. 

DRAWING ON THE PAST 

Previously, Wesker founded 
Sequoia Software Corp., which 
was acquired by Citrix Systems 
Inc. in March 2001 for US$185 
million, and he drew on that 
experience when designing the 
Artifact software. Wesker point- 
ed out that when Citrix closed 
the Sequoia offices, Citrix didn't 
know what to do with Sequoia's 
source code. 

And, as is often the case, Wes- 
ker said, when the original author 
of some code leaves, the compa- 
ny is left with intellectual proper- 
ty that has no context and often 
no practical life beyond what the 
author intended. "That's really 
where it becomes valuable," he 
said, "to be able to use and share 
and understand code, not simply 
search and find it." I 















- 




/I 


r^ 1 










fa ^m^r i_r m 









ero 



Ji-ji.wlKrCi- j 



L-r.i-h 



(levtbpmtoiE 



PE]i>p3iiertT itu?ri: 



fompUcattcl ihan cut ixToru i3 



deploying ;mU delivering £ofri¥*iiv 



j|>pliLjiiL!iii^ Ins Li?nipl iL3Lt: J. hir hc>[li ymi ;ii3il vaur ciiitfxium Tbe Lticlusiry jurctril- 
Wttmtng TnSitnJiAnywhcTC and I\>u r ertJpclak- from Zero G combine the hinctioEiuEit} thai 

LJitcrpcise sijluvjj-f drvtiupLTh nted Willi aj] Linpjrjllttrd cue uf Lb* ihjl ayrs LiniE jjuI 
monc^.TlinL s wtiv industry lenders like Sun. Now]] and IBM chwwe us. 



T W ^K 



your software deployment partner 
www.ZerdG.cdm 



14 



NEWS 



Software Development Times . October 1, 2003 



www.sdtimes.com 



Merant SCM Suite Acts More Professional 

File server, build tool added in; asset, issue tracking updated 

BY DAVID Rubinstein ment tool has been updated and build management system and a access via HTTP from all clients 

New name, new features: Mer- renamed Merant Professional 8. new file server as part of its Ver- while providing a single reposito- 

ant Inc.'s PVCS Professional This new version, released on sion Manager tool. ry for the storage of assets, 

software configuration manage- Sept. 29, now includes Merant s The file server provides according to Merant s Patrick 
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Merritt, product marketing man- 
ager of the Merant Pro suite. 

"Before, everyone had to 
have direct access to the files," 
Merritt said. "Now, they can use 
whatever interface they want to 
gain access. It can be a desktop 
client, or through an IDE inte- 
gration." This gives project 
managers better control of the 
assets while giving developers 
better access, he explained. 

The Web client also was 
upgraded to give what Merritt 
called "more parity with using a 
desktop client or accessing via 
an IDE," with column sorting, 
recursive file listings, and differ- 
ence and merge features built 
in, Merritt said. 

The suite also includes 
improvements to the Merant 
Tracker issue-management soft- 
ware. Merritt said the company 
has added support for multiple 
issue types, such as tasks, 
enhancements and require- 
ments. Merritt explained that 
users can create relationships 
between the types and defects, 
and these can be carried across 
multiple projects. 

The notification rules within 
Merant Tracker have been 
changed, he added, so that users 
can create complex relationships. 
"If these two rules apply, then 
notify," Merritt offered as a possi- 
ble scenario for notification rules. 

Also, there is a new feature 
called issue escalation, which 
Merritt described as a way to 
notify a project manager if 
expected changes are not yet 
done. "For instance, if you have 
a high-priority item and there is 
no change in a certain period of 
time, the department head 
should probably be notified," 
he said. "It prevents issues from 
falling through the cracks." 

MERANT BUILD INCLUDED 

For the first time, Merant Build 
is integrated into Version Man- 
ager, Merritt said. This tool, 
created from an OEM agree- 
ment with Catalyst Systems 
Inc., creator of OpenMake, was 
introduced with Merant Di- 
mensions 8 last year. Merritt 
said minor upgrades such as a 
new integration with Micro- 
soft's Visual Studio .NET and 
changes to Java language sup- 
port have been completed. 

Merritt said pricing has not 
increased with the new name 
and release; Merant Profession- 
al 8 costs US$1,300 per named 
user and $4,899 for concurrent 
licenses, while Version Manag- 
er and Tracker cost $749 each 
per named user. I 
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Introducing the native XML 
data management solution 

that's already been 
around the block 
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XML HARDWARE 

< continued from page 1 

signature processing, LDAP lookup and 
user token validation in advance of 
handoff to the application server. 

Kuznetsov said that processing 
overhead often leads organizations 
either to buy more general-purpose 
hardware, use nonstandard subsystems 
of XML, or avoid XML and SOAP alto- 
gether. That's not good, as developers 
lose the cross-platform compatibility 
benefits of XML. 

"The whole reason of moving to XML 
is that you can easily connect to other sys- 
tems," he said. "Once you move off the 
standard and go to proprietary subsets, 
you can no longer process XML messages 
designed by other systems. And even if 
those companies are not going outside 
their own firewall, they have business 
units they need to connect to." 

THE DEDICATED APPROACH 

Making a case for dedicated XML pro- 
cessing hardware is Joelle Kaufmann, 
director of marketing of Reactivity Inc., 
which develops and markets XML Fire- 
wall, a stand-alone XML security accel- 
erator. Kaufmann explained how devel- 
opers building Web services can 
sometimes be forced to divert attention 
away from writing business logic. 

"With traditional development, a 
single application interface goes 
through a security layer and into busi- 
ness logic," she said. "With Web ser- 
vices, you expose business logic direct- 
ly; you don't have the protection of the 
security layer. That forces developers 
focused on business logic to have to 
implement base-level security and 
interoperability that is not their exper- 
tise or their inclination. Nor is it a good 
use of them as resources." 

Another problem for Web services 
developers is that of adding business 
partners, according to Eric Graven- 
gaard, Reactivity's XML Firewall prod- 
uct manager. Even at its simplest, 



adding each new partner involves time 
and complex development, he said. 

Gravengaard explained, "Let's say 
you're not going to change your API at 
all, and all you want to do is provision 
access using a strong authenticator like 
an x.509 certificate in a two-way XSL 
exchange. In order to get that to work, 
both sides have to agree on which route 
certificate will be trusted, who will be 
issuing the certificates, and how they 
will be checked against replication lists. 
As a developer you have to go through a 
lot of crypto code to make sure you are 
validating the client certification cor- 
rectly and logging it all. Then you have 
to go through the XSL handshake 
debugging process," which he said can 
take weeks. 

"With Web services you're constantly 
adding new partners and services that 
are connecting to each other. We've seen 
it take anywhere from six weeks to six 
months to add a new partner. We've 
done it in as little as two days," claimed 
Kaufmann, whose company in mid- 
August received more than US$10 mil- 
lion in additional venture funding. 

BOARD ACCLERATION 

Another approach forgoes the dedicated 
appliances favored by DataPower and 
Reactivity. Intel spinoff Tarari Inc. offers 
XML Content Processor, a server add-in 
board that according to Michael Leven- 
thal, the company's director of XML 
products, presents some unique bene- 
fits. "Tarari exposes its acceleration tech- 
nology through APIs which may be used 
directly in application programs," he 
said. "This offers software developers an 
entirely new approach to creating effi- 
cient software processes." 

Unlike the stand-alone solutions 
from DataPower and Reactivity, the 
internal board is capable of supporting 
finer-grain processes than external box- 
es, Leventhal claimed, who added that 
stand-alone solutions can cost 10 times 
as much as the $5,000 XML Content 
Processor costs. I 
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Stand-alone XML accelerators, according to DataPower, work by preprocessing SOAP mes- 
sages before handing them off to the application server. 
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ORACLE'S GRIDS 

4 continued from page 3 

apparent that he was talking 
about hardware. Oracle did not 
discuss any of the pricing for the 
new database, app server, stor- 
age grid software or grid man- 
agement tools, even when ques- 
tioned by the keynote audience. 



He also wouldn't confirm 
whether there would be special 
pricing for the grid enablement, 
or if this would be a core func- 
tion built into all editions of the 
lOg product family. 

This is reminiscent of the 
introduction of the Oracle 9i 
Real Application Clusters on 
June 14, 2001. At that historic 



launch, Ellison cited a price of 
$40,000 for the enterprise edi- 
tion of Oracle 9i database — but 
never indicated that a separate 
license was required to actually 
enable the clustering features, 
for an additional $20,000 per 
server processor. Ouch. Since 
Oracle declined to disclose 
prices, it's hard to tell exactly 



what the real cost of adding an 
additional server to a lOg grid 
would be, but undoubtedly it's 
going to be more than $5,000. 

OTHER HIGHLIGHTS 

A keynote address by Sun 
Microsystems Inc.'s Scott Mc- 
Nealy focused on the company's 
low-cost Intel-based Linux box- 
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Sun's software 
pricing is 



es; the company's 
CEO claimed 
that Sun's new 
SunFire V65x, a 
dual-Xeon server, 
costs less than a 
comparable mod- 
el from Dell. 
While acknowl- 
edging the appeal changing 
of the free Linux again, says 
operating system McNealy. 
running on Sun 
servers, McNealy also hinted 
that the company would shortly 
introduce new pricing models 
for its software, potentially 
bundling Solaris at no cost with 
its x86 hardware. 

McNealy also stated that 
Sun would soon stop selling a 
separate "Trusted Solaris" ver- 
sion of the operating system, 
and would merge that edition's 
extra security features into the 
standard version of the product. 

While McNealy's traditional 
taunts at Dell and Microsoft, 
and snide humor about Ellison's 
focus on yachting, drew laugh- 
ter from the keynote audience, 
the crowd was silent when he 
claimed that the technology 
industry is overstaffed by an 
order of magnitude, and that's 
why software and hardware is 
too expensive. His appeal for 
hiring Sun's global service divi- 
sion to manage enterprise IT 
assets also drew silence from a 
crowd largely consisting of data- 
base administrators who are 
undoubtedly already nervous 
enough about their jobs. 

The crowd did enjoy the pre- 
sentation by Craig Barrett, CEO 
of chipmaker Intel Corp. Unlike 
the other keynote speakers, all of 
whom were essentially present- 
ing sales pitches for their prod- 
ucts, services and technology, 
Barrett emphasized the impor- 
tance of information technology 
within the enterprise. 

Two points of note: A video- 
taped tour of the University of 
Cambridge's recently upgraded 
National Cosmology Super- 
computer (www.damtp.cam.ac 
.uk/cosmos/Public), complete 
with comments by famed astro- 
physicist Stephen Hawking; 
and a case study of the design of 
Ford Motor Co.'s new Ford GT 
concept car (www.fordvehicles 
.com/fordgt), which concluded 
with the chief designer driving 
one of the three prototypes into 
the auditorium. 

The analogy was apt: Like 
the Oracle lOg products, you 
can't buy the Ford GT today. 
And you can't even find out 
what it costs. I 
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STAR West 2003 Still Shines on Testing Dialogue 



BY EDWARD J. CORREIA 

Testing Dialogue sessions, 
debuted by Software Quality 
Engineering Inc. at its STAR 
East conference in May, will be 
recreated at the company's 
STAR West conference on soft- 
ware testing, analysis and 
review coming to the Fairmont 
Hotel in San Jose Oct. 27-31. 

At the two-hour moderated 
sessions, developers gather with 
expert testers to discuss testing 
problems from a list of topics. 
Participants may simply listen, 
share their experiences or begin 
new topics. Wednesdays ses- 
sion will cover management 
topics; Thursday's will feature 
technical issues. 

There will be nine new tuto- 
rials this year, with topics rang- 
ing from "Becoming a Great 
Test Manager" to "How to 
Break Software Security," the 
latter hosted by Herbert 
Thompson, awarded Best Pre- 
sentation by SQE for his May 
STAR East keynote. His STAR 
West keynote, also titled "How 
to Break Software Security," 
is scheduled for Wednesday at 





EH 

EZZu 



CONFERENCE: Oct. 27-31 
Fairmont Hotel, San Jose 

PRECONFERENCE TUTORIALS: 
Monday, 8:30 a.m.-5 p.m. 
Tuesday, 8:30 a.m.-5 p.m. 

CONFERENCE HOURS: 
Wednesday, 8:30 a.m.-4 p.m. 
Thursday, 8:30 a.m.-4:30 p.m. 
Friday, 8:30 a.m.-1:30 p.m. 

EXHIBIT HOURS: 
Wednesday, 11 a.m.-6:30 p.m. 
Thursday, 9:30 a.m.-3 p.m. 

TESTING DIALOGUES: 
Wednesday, 1:45 p.m.-4 p.m. 
Thursday, 10 a.m.-12:15 p.m. 

BONUS SESSIONS: 
Wednesday, 6:30 p.m.-8:30 p.m. 
Thursday, 6 p.m.-8 p.m. 
Friday, 1:30 p.m.-3:30 p.m. 

KEYNOTES: 

Wednesday, 8:45 a.m., "Managing the 

Management Balancing Act," Johanna 

Rothman 

10 a.m., "Hot to Break Software 
Security," Herbert Thompson 

4:30 p.m., "Testing Web Services," 
Adam Kolawa 

Thursday, 8:30 a.m., "Improving 
Requirements Through Testing," 
Richard Bender 

4:30 p.m., "Surviving the Top Ten 
Challenges of Software Test Automa- 
tion," Randall W. Rice 

Friday, 8:30 a.m., "Testing in Changing 
Times," Brian Marick 

www.sqe.com/starwest 



10 a.m. Thompson is director of 
security technology at Security 
Innovation LLC, which devel- 
ops and markets application 
security testing software. 

The opening keynote, titled 
"Managing the Management 



Balancing Act," will cover ways 
to help avoid the traps many 
managers commonly face, such 
as how to effectively move de- 
velopers from one project to 
another, when to dump a pro- 
ject, and when to say no to upper 



management. The speech will be 
delivered by Johanna Rothman, 
a software testing consultant and 
columnist for Software Develop- 
ment Magazine and Sticky- 
minds, com. 

Other keynotes, six in all, 



will cover Web services testing, 
using the testing process to 
improve application require- 
ments, automating the testing 
process, and coping with the 
rapidly changing world of test 
tools and how to keep up. I 
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Mercury Optimizes Its Tools in New 'Centers' 



BY DAVID RUBINSTEIN 

With the goal of helping devel- 
opers manage IT processes bet- 
ter, Mercury Interactive Corp. 
last month unveiled four Busi- 
ness Technology Optimization 
Centers, that is, new product 



suites that bundle existing Mer- 
cury products with new ones 
developed from the acquisi- 
tions earlier this year of Perfor- 
mant and Kintana. 

Mercury believes that com- 
panies are moving toward a 



"centers of excellence" approach, 
according to Jonathan Rende, 
vice president of marketing at 
Mercury. Rende called the 
announcement "the biggest in 
the history of the company," 
with three new products being 



introduced and many others get- 
ting significant upgrades. 

Each of the four centers — for 
IT governance, quality, per- 
formance and business avail- 
ability — share a common arch- 
itecture, he said. Each has a set 
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Technology 



of integrated applications that 
automate processes, sitting atop 
a J2EE -based foundation that 
allows users to share informa- 
tion and best practices, and 
includes a dashboard view into 
projects in progress. 

"As an application moves 
through its phases, you can see 
if the team is meeting the goals, 
helping you to make better, 
more informed decisions about 
when to bring the application 
live," Rende said. 

CENTERS OF ATTENTION 

The IT Governance Center, 
Rende said, includes applica- 
tions that help manage the sem- 
inal business processes that 
occur when business analysts 
come to IT for a new application 
or for modification of an existing 
application. That initiative must 
then be prioritized in relation to 
all other initiatives, Rende said, 
and tools must be available to 
manage that process. 

The center includes eight 
applications based on the Kin- 
tana technology: Demand, 
Portfolio, Program, Project, 
Resource, Time, Financial and 
Change. The Portfolio Manager 
has had some new metrics built 
in, as well as new user interface 
configuration options. 

The Quality and Perfor- 
mance centers fall into the 
application delivery phase: 
Quality includes WinRunner, 
TestDirector and QuickTest 
Professional, as well as a new 
Business Process Testing appli- 
cation that allows business ana- 
lysts to create business process- 
es and have the underlying 
assets automatically generated. 

TestDirector includes new 
trace ability links and a way to 
enforce the use of best prac- 
tices, while QuickTest Profes- 
sional gets XML and .NET sup- 
port. The Performance Center 
consists of LoadRunner, Load- 
Runner TestCenter, Tuning and 
Diagnostics applications and a 
new Capacity Planning applica- 
tion that allows decisions about 
how much hardware and soft- 
ware a new application will 
require to be made. These cen- 
ters were part of Mercury's 
short-lived Optane initiative. 

The Business Availability 
Center includes five Topaz tools 
and a new Customer Impact 
application for assessing prob- 
lems and prioritizing issues. 

Pricing has not yet been set 
for these new product suites, 
which Rende said would be 
delivered before the end of the 
year. I 
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MORE PRODUCTS 



_L 



< continued from page 8 

for Java-to-.NET and COM interoperability . . . theKompany.com has 
released dbRadar 1.0, a Linux and Windows IDE for database develop- 
ment. The software, priced at US$49.95, works with DB2, MySQL, Ora- 
cle and PostgreSQL . . . Ensemble Systems Inc. has shipped versions 
of its Glider J2EE development and testing environment that plug into 
BEA's WebLogic Workshop and SlickEdit's Visual SlickEdit editor 
. . . The latest version of CodePro Studio, a set of WebSphere Studio 
and Eclipse add-ins from Instantiations Inc., adds new collaborative 
features of IBM's IDEs. Version 2.3 also contains a dependency ana- 

i CodePro Studio !^r™5T- 

an automated spell checker . . . Xbridge Systems Inc. has now added 
support for SOAP, WSDL and DCOM to its Host Data Connect main- 
frame database integration software . . . Aladdin Systems Inc. is offer- 
ing a downloadable beta of its Stufflt InstallerMaker 8.0 for Mac OS 
X. The new release can install to protected locations, run shell or 
AppleScript programs from within the installer, and handle resource 
bundles as if they were individual files (rather than as folders) 
. . . Version 3.0 of Smtp.NET, a programmable e-mail component from 
ExclamationSoft Corp., now offers automated Zip compression of 
attachments. The .NET software costs US$99 per processor. 



PEOPLE 



Compuware Corp.'s president, Joseph Nathan, has retired after 22 
years with the company. Compuware has not yet named a replacement 
. . . Test tools vendor Segue Software Inc. has hired Joseph Krivickas 
as its new CEO. Krivickas was formerly CEO of iPhrase Technologies 
Inc., and COO of Bluestone Software Inc. Segue's previous CEO, 
Stephen Butler, left the company in May. I 



J2EE 1.4 



< continued from page 1 

date until August, Hapner said. 

Although the WS-Is Basic 
Profile is designed to guarantee 
that Web services can commu- 
nicate and work with one anoth- 
er, it's still possible to use J2EE 
1.4, follow the profile guide- 
lines, and end up with a Web 
service that isn't interoperable 
with those created on 
non-J2EE platforms, 
such as Microsoft's 
.NET, Hapner admit- 
ted. The tests includ- 
ed with J2EE 1.4 
focus solely on com- 
patibility with Java- 
based Web services. 

"The [compatibility Right now, there is 
test suite] does not no interoperability, 
have a .NET interop- says ZapThink's 
erability test," he said, Schmelzer. 
adding that he hasn't 
seen any specific commitments 
from Microsoft regarding com- 
pliance with the WS-I Basic 
Profile 1.0. 

Part of the challenge for 
Web services developers is that 
despite the best efforts of the 
WS-I or of individual develop- 
ers, there's no assurance of 
interoperability. "Rather than 



trying to build their own test 
suite or seal of approval, [the 
WS-I is] depending on the 
developers and end users to 
test [compatibility] themselves. 
The tricky part is there hasn't 
been a .NET implementation," 
said Ron Schmelzer, senior 
analyst at ZapThink LLC, a 
market analysis firm specializ- 
ing in Web services. "A claim of 
interoperability is premature 
right now." 

The qualification re- 
lease, which includes 
the specification, source 
code for the reference 
implementation and a 
compatibility test suite, 
will be available only 
to licensees of J2EE 
itself. However, binary 
versions of the qualifi- 
cation release — with- 
out the source code 
and test kit — will be 
made more generally available, 
said Hapner. 

The purpose of the qualifi- 
cation release is to help those 
licensees prepare their own 
J2EE implementations prior to 
the final release of the J2EE 1.4 
spec. That spec itself has been 
in "proposed final draft 3" stage 
since April. I 



... 
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NO JOY 



< continued from page 1 

technologist will fall to Greg 
Papadopolous, who was already 
Sun's executive vice president 
and CTO. No word was given as 
to a reason for Joy's departure, 
or if he will join or start another 
company. 

Joy, one of the four co- 
founders of the firm, follows 
other key executives who have 
left Sun, such as president Ed 
Zander and CFO Michael 
Lehman, both of whom depart- 
ed last year. He is best known 
for his role in developing BSD, 
the Berkeley Standard Distribu- 
tion of Unix, which was the 
foundation of Sun's Solaris 
operating system. 

Before joining Sun in 1994, 
Papadopolous was senior 
architect and director of prod- 
uct strategy for Thinking 
Machines Corp., and also 
taught computer science and 
electrical engineering at Mass- 
achusetts Institute of Tech- 
nology. 

His responsibilities at Sun 
have included serving as chief 
scientist of its server systems 
engineering and enterprise 
storage groups. I 
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C++ BUILDER 

< continued from page 1 

on Solaris, as well as Linux and 
Windows out of the box. "We 
never had a tool chain for C+ + 
that ran on an enterprise plat- 
form such as Solaris," he said. 

Another benefit: C + + 
Builder X is now compiler tool- 
chain agnostic, according to 
LeBlanc. Some editions of the 
new C++ environment, which 
shipped in mid-September, 
include Borland's C++ compil- 
er for Windows; Microsoft's 
Visual C + + compiler; GCC for 
Linux, Solaris and Windows; 
and Intel's C++ 7.1 compilers 
for Linux and Windows. Not in 
the box, but supported if the 
developer owns it, are the 
Metrowerks C++ compiler and 
Sun's Forte C++ compiler for 
Solaris on SPARC processors. 

According to LeBlanc, devel- 
opers can plug other compilers 
in as well. "If you have a special 
compiler, as is common in the 
embedded space, you can easily 
plug it in. 

"There's no one compiler 
that's best," he continued. "If 
you're looking for performance 
on the runtime, that's one com- 
piler; if you're looking for per- 



formance at compile time, you 
might choose another." 

Indeed, admitted LeBlanc, 
"since our focus has been on 
rapid application development, 
we tend to focus on compile 
time; we'd be good, but not 
great, at runtime. Whereas you 
have the Intel compilers that 
are excellent at runtime — 
they're the fastest — but at com- 
pile time, they could be slow." 

A free Personal edition of the 
C++ Builder X compiler is now 
being offered, which will 
include only the Borland com- 
piler. A US$1,000 per seat 
developer edition adds the extra 
compilers, as well as licensed 
versions of Intel's Math Kernel 
and Performance Primitives 
libraries. The top shelf is the 
$2,500 enterprise edition, which 
adds Intel's VTune profiler, Alto- 
va's XML Spy 5, and develop- 
ment licenses for a variety of 
database tools. 

X MARKS THE SUITE 

Moving beyond the C + + 
Builder X Enterprise Edition, 
Borland also has released an 
Enterprise Studio suite version 
that includes a starter version 
of Borland's StarTeam and 
CaliberRM, as well as the com- 
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Borland's Enterprise Studio for C++ includes a new Together Edition modeler, the company's first for that language. 



pany's new Together Edition for 
C++ Builder X. The latter is a 
port of Borland's modeling soft- 
ware, which according to 
LeBlanc brings the company's 
first simultaneous round-trip 
modeling and code visualiza- 
tion capability to C++ develop- 
ers. Enterprise Studio costs 
$5,000 per seat. 

Finally, Borland has re- 



vamped its bilingual Borland 
Mobile Studio, a $6,999-per- 
seat tool suite for Java and C+ + 
that is designed to work with 
J2ME and Symbian OS, to 
include the new C + + Builder X 
environment. 

Since its C + + and Java 
development environments are 
now based on the same code, 
would Borland ever create a sin- 



gle multilanguage IDE to com- 
pete against Microsoft's Visual 
Studio .NET? LeBlanc hinted 
about the feasibility, saying, 
"There's not a reason today why 
there's two separate products. I 
think it's a very good vision, but 
I can't say any more about it 
than that. For now, they're two 
separate products, based on the 
same technology." I 
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Embedded Developers Embrace Linux Kernel 2.6 

Cite enhancements to mainstream tree as key to device portability 




BY EDWARD J. CORREIA 

Most sources indicate that a sta- 
ble version of the Linux kernel 
2.6, which went into beta testing 
in July, will be available by year's 
end. And with kernel pre-emp- 
tion and a more granular sched- 
uler among the promised en- 
hancements for the 
mainstream feature 
set, embedded devel- 
opers will soon have a 
standardized way to 
build real-time appli- 
cations sanctioned by 
Linux creator Linus 
Torvalds. 

According to Bill 
Weinberg, director of 
strategic marketing at 2.6 should appear 
embedded Linux de- sometime in 2004, 
veloper MontaVista says Weinberg. 
Software Inc., "Cus- 
tomers, whether enterprise or 
embedded, want good new tech- 
nology, but they want it to be 
stable — certainly everyone in 
embedded is conservative with 
regard to a stable platform. 
Based on what Linus has said, we 
see a stable 2.6 showing up 
by the end of the year," and a 
MontaVista Linux based on 2.6 to 
follow sometime in 2004, he said. 

Meanwhile, RTOS developer 
LynuxWorks Inc. in early Sep- 
tember released a beta version of 



A MontaVista Linux 
based on kernel 



Blue Cat Linux 5.0, which is 
based on the new kernel. 
According to chairman and CEO 
Inder Singh, 2.6 is a major step 
forward. "I think this makes Lin- 
ux a lot more suitable for embed- 
ded applications out of the box. 
Different vendors have added 
various things [to Lin- 
ux], and many of those 
are in the kernel now in 
a standard form." Blue 
Cat Linux 5.0 is sched- 
uled for release in 
November. 

Bob Morris, vice 
president of sales and 
marketing at Lynux- 
Works, said such stan- 
dardization is important. 
"This allows developers 
to make a real-time 
application that is trans- 
portable," he said, adding that 
prior efforts to build real-time 
applications for Linux relied on 
proprietary extensions. "That 
defeats one of the major benefits 
of Linux," added Singh. 

Singh said enhancements to 
kernel performance could help 
accelerate Linux adoption. "This 
improves the real-time response 
of the kernel and opens up more 
possibilities of building off-the- 
shelf solutions instead of invent- 
ing everything from scratch." 



Singh said LynuxWorks has seen 
strong interest from defense 
industry customers. 

CUTTING OVER TO 2.6 

According to Weinberg, cus- 
tomers using MontaVista's ker- 
nel pre-emption patch will suf- 
fer no ill effects from migration 
to 2.6. "Linux kernel 2.5 con- 
tains MontaVista's pre-empt- 
able Linux patch, which is car- 
rying forward into 2.6. So there 
are no changes we have to wor- 
ry about in terms of migration. 
What's in our product today is 
what's in 2.6." 

Weinberg explained how 
MontaVista's current version, 
which is based on Linux 2.4.20, 
will minimize migration issues 



when switching to the new 
scheduler. "The standard Linux 
scheduler is exhaustive in the 
way it examines tasks or threads 
that are ready to be scheduled," 
while the new scheduler con- 
tains an algorithm that doesn't 
require it to be exhaustive, he 
explained. "That helps resolve 
contention for CPU at the same 
priority. And when you have 
multiple paths to different prior- 
ities, it reduces scheduler latency 
to a very small amount of time." 
Policies from older applica- 
tions developed with schedul- 
ing in mind, he continued, 
should automatically take 
advantage of the new scheduler. 
"Transparently, any application 
that was already using the more 



sensitive scheduling policies 
will gain performance advan- 
tage by having faster, more effi- 
cient scheduling latencies." 

The new kernel also will 
include enhancements to multi- 
threading, which Weinberg said 
are not normally associated with 
embedded applications but, he 
insisted, play a vital role. "We 
have learned that embedded 
applications are often more mul- 
tiprocess and multithreaded than 
a lot of enterprise applications." 
By contrast, he said a typical set- 
top box, such as a TiVo personal 
video recorder, runs as many as 20 
threads when off and around 50 
when switched on. "So the ability 
to schedule that load efficiently is 
important." I 



SCO SUIT NO FACTOR FOR LYNUXWORKS 



With the specter of a US$32-per-unit royalty for 
Linux-based devices still looming due to The SCO 
Group's claim that its intellectual property is 
built into Linux, LynuxWorks Inc. has developed 
an alternate strategy. "[The suit] doesn't impact 
us or our customers," claimed Bob Morris, vice 
president of sales and marketing at RTOS devel- 
oper LynuxWorks. His company has pledged to 
give away its LynxOS Linux-compatible RTOS to 
anyone being socked with the fee. "Regardless of 
what happens, our customers would be made 
whole by having an operating system that would 
allow them to continue to deploy with the appli- 



cations they developed. If we can't replace the 
offending code, we give them LynxOS," Morris 
said. According to LynuxWorks chairman and 
CEO Inder Singh, LynxOS was independently 
audited in the mid-1990s and found to be free of 
Unix code. 

Singh said such a royalty would be unrealistic, 
particularly for low-margin, mass-market con- 
sumer devices. "If you add $32 to a $99 MP3 
player, SCO would be the only one that makes 
any money, which is not too different from what 
Microsoft and Intel get away with. But that's 
another story." -Edward J. Correia 



ESC Spawns 'Bleeding Edge' Modeling Software 



BY EDWARD J. CORREIA 

The 4,000 expected attendees of 
this year's Embedded Systems 
Conference, held at the Hynes 
Convention Center in mid-Sep- 
tember, found some 
interesting develop- 
ments, including a pair 
of new modeling tools based on a 
version of the Unified Modeling 
Language specification that has 
yet to be finalized. 

I-Logix Inc., an early pio- 
neer of modeling software for 
embedded development, has 
released Rhapsody 5.0, which it 
says conforms to Object Man- 
agement Group Inc.'s UML 2.0 
adopted specification. It is not 
expected to be an available tech- 
nology until April 2004. 

Features in the new UML 
spec permit Rhapsody ports to 
be used to define system inter- 
faces, allowing the reuse of 
system elements within and 
across projects. Lifelines can 



now be referenced and decom- 
posed within Sequence Dia- 
grams, making complex sce- 
narios more readable. 

Beyond UML, Rhapsody 
adds the ability to cre- 
ate functional block 
diagrams with data 
flows using modeling notations 
while remaining within a UML 
2.0 environment. Also new is a 
Requirement Element, which 
captures and can link applica- 
tion requirements to other ele- 
ments. Activity Diagram opera- 
tions are now executable, 
permitting observation of their 
outcomes. 

Also introducing a UML 2.0- 
compliant tool was Aonix 
North America Inc. The com- 
pany unveiled Ameos, a model- 
ing environment for Linux, 
Unix and Windows worksta- 
tions that includes a profile edi- 
tor and predefined profiles for 
Raven, its DO-178B-certified 



RTOS kernel for safety-critical 
applications. Editions for devel- 
opers, modelers and analysts 
that generate Ada 95, C/C++, 
Java, CORBA, COM and EJB 
code are available now. 

The company this month 
plans to release PERC 4.1, 
adding a profiling tool and real- 
time pacing agent to its Java- 
based real-time development 
platform acquired from embed- 
ded developer NewMonics Inc. 
in August. 

Aonix also announced a new 
version of SmartKernel, its lan- 
guage-specific operating system 
enabling layer that it says will 
improve security of embedded 
systems by adding a memory- 
and time-partitioned kernel. 
SmartKernel reportedly allows 
developers to add certified appli- 
cations and components to a sys- 
tem without the need to recerti- 
fy the entire system. Versions are 
available now for Ada 83, 



C/C++, Java and ARINC-653. 

Triscend Corp., maker of 
configurable system-on-chip 
circuits, has released A7V, the 
latest in its family of ARM 7- 
based 32-bit field-configurable 
designs. 

Communications interfaces 
on the new SoC include USB, 
Fast Ethernet, CAN 2.0B and 
multiple UARTs, all of which 
can be programmed with 
Triscend's FastChip 3.0 devel- 
opment environment, also 
unveiled at the show. A devel- 
opment kit is scheduled for 
release by year's end. 

RISC-based board maker 
Applied Data Systems Inc. has 
released SMX, a 2 x 3-inch sin- 
gle-board computer built around 
Intel's PXA255 400MHz XScale 
processor. The SMX can drive 
up to 1,280 x 1,024 pixels at 
a depth of 16 bits and accom- 
modate wireless or Fast Ether- 
net and a multitude of serial 



communications ports. 

Embedded RTOS developer 
Quadros Systems Inc. has 

added execution profiling to the 
kernel awareness module of 
RTXC Quadros RTOS, the com- 
pany's real-time operating sys- 
tem. The module, which works 
with the CodeWarrior Debug- 
ger from Metrowerks Corp., 
reportedly allows developers to 
identify and resolve application 
bottlenecks by providing a view 
of the order and relative perfor- 
mance of real-time tasks, 
threads and interrupt service 
routines as they execute. 

Available now, Execution 
Profiler displays runtimes, pre- 
emption times and scheduling 
latency, permitting evaluation 
of thread priority assignments 
and more accurate prediction 
of task performance and relia- 
bility, the company says. The 
software is free to current 
RTXC licensees. I 
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Palm's Tech Strategy: Let Someone Else Do It 

Pillars of Palm OS built from IBM Java implementation, Novarra wireless browser 



BY EDWARD J. CORREIA 

"We're focused on enabling 
standards, not inventing new 
ones." This was how Nathan 
Freitas, senior manager of Java 
products at Palm Solutions 
Group, described in early Sep- 
tember the company's decision 
to license the WebSphere Micro 
Environment Toolkit for Palm 
OS Developers from IBM. 

The announcement came ful- 
ly 15 months after David Nagel, 
CEO of software divi- 
sion PalmSource Inc., 
declared Java to be 
among the main pil- 
lars of future Palm 
operating systems. 
Also in early September, Palm 
licensed wireless technology 
from Novarra Inc. that it will use 
as the basis for the Palm Web 
Pro browser to be shipped with 
its Tungsten handheld comput- 
ers. Earlier this year Palm 
acquired rival Handspring Inc.; 
following completion of that 
acquisition and the spinoff of 
software division PalmSource 
Inc., both expected this fall, the 




The new name and logo 



company will begin calling itself 
palmOne Inc. 

Additional recent machina- 
tions include the sale by Palm- 
Source of its Palm Digital 
Media electronic book publish- 
ing division to PalmGear Inc., 
which distributes Palm OS- 
based devices, applications and 
accessories. PalmGear also has 
agreed to make its e-commerce 
infrastructure and customer 
and technical support avail- 
able to PalmSource 
for its Palm OS soft- 
ware catalog. 

In the deal with 
IBM, both companies 
will distribute IBM's 
developer tools and J9 CLDC/ 
MIDP 1.0 virtual machine for 
all Tungsten models running 
natively on Palm OS 4.1 or 
through Palm's application com- 
patibility environment for Palm 
OS 5.1 and higher (a native 
ARM version is planned for the 
future). The deal builds on an 
agreement made in June under 
which Palm licensed IBM's DB2 
Everyplace, WebSphere MQ, 



Lotus Notes collaboration and 
WebSphere Everyplace devel- 
opment environments. 

The WebSphere Micro En- 
vironment Toolkit for Palm OS 
Developers is available now for 



free at www.palm.com/Java, 
including the JarToPRC appli- 
cation packaging utility, debug- 
enabling utility and a develop- 
ment runtime license. IBM also 
will offer a version of its Web- 



Sphere Device Studio MIDlet 
development environment for 
Palm at its developerWorks 
Web site. End-user runtimes 
also will be free; a release date 
was not disclosed. I 



eCosCentric: eCos Is Stable and Ready to Deploy 



BY EDWARD J. CORREIA 

"The main value we're provid- 
ing is a stable eCos release," 
said Alex Schuilenburg, CEO of 
eCosCentric Ltd., speaking of 
the eCosPro Developer's Kit, 
released in early September. 
The kit bundles the latest eCos 
POSIX-compliant kernel and 
RedBoot boot loader, prebuilt 
tools for Linux or Windows 
hosts, a new PPP stack, installer 
and technical support. An 
Eclipse-based IDE is planned 
for November. 

According to Schuilenburg, 
the release marks a major mile- 
stone for eCosCentric, the com- 
pany formed by four of eCos' 
original developers unemployed 
when Red Hat dropped the pro- 



ject in May 2002. "This is the 
first fully tested version of eCos 
that is targeted at professional 
developers and organizations 
looking to use eCos in their 
products." Schuilenburg claimed 
that testing was rigorous. The 
initial eCosPro release will tar- 
get designs based on ARM, 
ColdFire, IA32, PowerPC and 
SuperH processors. ECos can be 
configured to fit in devices with 
extremely limited resources. 

Also significant is the PPP 
(Point to Point Protocol) stack, 
which Schuilenburg claimed to 
be the first for eCos. This per- 
mits devices to gain Internet 
access via dial-up connection 
and lets developers dial into 
remote devices to perform 



maintenance and diagnostics 
where physical access might be 
difficult or impossible. "We 
have some eCos-based devices 
that are buried under about a 
mile and a half of Arctic ice," he 
said. Schuilenburg said the 
stack also will be released as 
open source. 

Available now, eCosPro 
Developer's Kit costs US$4,000 
per company per quarter, in- 
cluding the royalty-free 
RTOS and support for an un- 
limited number of projects and 
developers. Schuilenburg said 
that when released later in 
November, the Eclipse-based 
C/C++ development tools will 
first target ColdFire, followed 
by either PowerPC or ARM. I 
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The Anatomy of a Complete 
Development Solution 



4th Dimension 2003 provides an environment 
for Rapid Application Development with an 
integrated database. Standalone applications 
can quickly and easily be created for both 
Windows and Macintosh platforms (including 
Mac OS X). 







WHEN THE 
SOLUTION 

MATTERS 

With no additional coding, your standalone 
application can be deployed in a cfient-server 
environment. Supporting mixed platform 
connectivity and automatic application 
distribution, 4th Dimension 2003 radically 
increases deployment efficiency. 
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Web 
Applications 



The same application can easily be Web- 
enabled, with complete scalability - from 
single -tier to three- tier architectures. With 
ar\ emphasis on security, 4D technologies 
are robust enough to run the US Army's 
Web servers. 




Services 



Your application can be Web services- 
enabled with a single dick. One-cJick Web 
service consumption and publishing with 
automatic code creation will have you on 
the fast track to application integration. 












4th Dimension 2003 

www.4D.com/sdtimes 



O 20GB JD. Inc. All nfhb. reserved. 4th Dimension, retired idrdi and mM 4D- product mmes are rejpirered Graderniris d 4D BA. M oiher tradename* are IrademKti or reentered trademarks- nl the* •mpedne hokkn. 



www.sdtimes.com 



. Software Development Times . October 1 r 2003 



SPECIAL REPORT 



29 




vLLlQ 



Li IMlliq 



As organizations test for defects earlier in life cycle, 
developers are being trained to get involved 



BY DAVID RUBINSTEIN 



i riting tests for code in develop- 
■ merit can be a difficult process, 
dotted with potential pitfalls at 
almost every turn. The com- 
i plexity of .NET and Java tech- 
nologies, the use of Web services written 
outside the organization, language gaps 
between testers and developers as well as 
developers and business requirements 
writers, questions of source code version- 
ing and even of when to test, all conspire 
to work against quality software. 

Many development shops find 
testing to be such a problem that 
they put it off until the end, and 
often end up reducing the testing 
time to almost nothing when projects 
run longer than they should, accord- 
ing to vendors and development 
managers. The result — in far too 
many cases, they say — is software that 
doesn't meet functional requirements, 
code that is loaded with bugs that devel- 
opers find next to impossible to recreate, 
and, at the bottom line, a hit to a compa- 
ny's profits. 

In the early 1990s, testing tools 
vendors thought they had the 
problem licked when they came out with 
automated testing tools that could run 
unit and functional tests at regular 
times. But according to Dave Locke, 
program director in the Rational soft- 
ware division of IBM Corp., vendors 
pushing automated testing tools "shot 
ourselves in the foot a bit. There were 
promises of point-and-click ease and 
'It'll be amazing.' It wasn't." 

The director of quality assurance at a 
major cruise line company, who did not 
wish to be identified for this article, said, 
"We're not a shining example of the ben- 
efits of automated QA. Part of it is skill 
set. Our existing testing people are not 
strong in automated testing. And I'm 
still not convinced of the value of auto- 
mated testing for a Web site or things 
that change quickly." 




Automated 
testing does have its 
benefits, others argue. Regular 
builds and testing can help improve 
the development process, they say. "If 
you're building every night and running 
tests, you find out right away if the soft- 
ware does what it is supposed to," said 
Robert Leahey, director of developer 
relations for test tools vendor Automat- 
edQA Corp. "There's no 'I'll take care of 
that in a few weeks.' It's a dramatic 
change in the way people code." 

PROCESS MAKES PERFECT 

Indeed, many advocates of strong 
development processes believe testing 
earlier in the cycle is critical to creating 



high-quality software. One of the key 
principles of the Extreme Program- 
ming methodology, as detailed in the 
book "Extreme Programming Ex- 
plained" by Kent Beck, for example, is 
that it relies "on automated tests writ- 
ten by programmers and customers to 
monitor the progress of development, 
to allow the system to evolve, and to 
catch defects early." 

While vendors and industry experts 
maintain that more testing is being 
moved up in the development cycle, at 
least one development organization is 
going in the other direction. "We're mov- 
ing away from writing [code] and testing 
at the same time," said Bob Armstrong, 
director of Internet and Information Sys- 
tems at Delaware North Co., a holding 



company for several subsidiaries 
involved in the hospitality and food ser- 
vices industries. "If I'm doing QA and 
development on the same servers, it's 
hard to know where you're at. You can't 
do consistent regression testing if things 
are changing midstream." 

The company's policy is to maintain 
separate development and QA areas, 
and it has been able to reduce the costs 
of hardware and software by using virtu- 
alization software from VMware Inc. to 
"clone" the development environ- 
ment for testers. Armstrong said 
this reduces DLL conflicts and 
versioning problems. 

There is wide agreement, 
though, that catching defects ear- 
lier in the development cycle can 
save countless hours of develop- 
ment time, lower the cost of 
producing the software and 
reduce time-to-market. Some 
say it is the business side of a 
company that's driving the push toward 
software testing. 

"It's not so much about the code as it 
is about the business process," said Lori 
Gipp, vice president of marketing at 
automated testing tool vendor Solstice 
Software Inc., claiming that companies 
are spending more of their develop- 
ment budgets on integration projects 
rather than creating new code. "Very lit- 
tle is about changing code; it's putting 
pieces together," she said. "This is a 
testing exercise." 

The Y2K problem at the turn of the 
century put more eyes on the problem, 
Gipp suggested. "Post-Y2K, more busi- 
ness people got involved in validating 
and testing systems. It brought a focus 
on QA earlier, and the business in- 
fluence [of a company] has a lot to do 
with where they sit in the spectrum" of 
testing. 

Joe Oddo, Solstice president and 
► continued on page 30 
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CEO, recalled that the stock markets 
almost melted down due to volume in 
1987, and said the financial industry no 
longer could accept assurances that sys- 
tems would not fail. "They had to be rig- 
orously tested on a regular basis. In the 
financial services sector, quality of ser- 
vice is the only way to differentiate. 
Business people cannot accept long 
cycles" to deployment. 

Businesses also are more concerned 
about software security than they have 
been in the past, as a growing number of 
business transactions are completed 
over the Internet. 

Indeed, building security right into an 
application by reducing its vulnerability 
to outside attacks is becoming more of a 
developer issue as well, according to 
Diane Fraiman, vice president of market- 
ing at security testing software provider 
Sanctum Inc. "Every single customer has 
pounded the table and said we have pri- 
oritized training our development organi- 
zations in producing quality software. 
That means secure. Security testing is 
being driven into development." 

DOWN TO DEVELOPERS 

To find and fix errors as early as possible 
in the life cycles, developers need to be 
on board for testing. "Foremost, you'll 
see the growth of unit testing with devel- 
opers," AutomatedQA's Leahey said. 
"They should have been doing it all 
along. Far too few do it now. The vast 



majority of people who do it are in an 
Extreme Programming mindset. Unit 
testing is a part of their methodology." 

Developers and testers will be able to 
come together only when tools are cre- 
ated to bridge their worlds, according to 
Compuware Corp. s Peter Varhol, prod- 
uct manager for the DevPartner devel- 
opment and debugging tool. 

"Developers absolutely hate having a 
defect reported by testers and having to 
spend hours trying to recreate it because 
the language [of testers] is ambiguous. 
It's very frustrating," Varhol said. For 
developers to successfully embrace 
doing testing earlier, he believes compa- 
nies "must make it as natural a part of 
the development process as possible. 
Asking developers to spend two weeks 
debugging is like asking them to spend 
two weeks in a dentist's chair to get all 
their teeth pulled." 

The key, according to Varhol, is to get 
developers to accept doing static source- 
code analysis or unit tests before moving 
on to the next phase of coding. 

This marks quite a cultural shift for 
developers, acknowledged IBM's Locke. 
"The issue is... coding seems to be the 
'productive' part of the application. 
Developers think, Tf we're coding, we 
must be getting somewhere.' " Also, he 
said, developers tend to believe they 
haven't written any bugs. Locke said 
companies need to do testing at the 
requirements level and during develop- 
ment, and said reuse of software design 
patterns that are known to be good can 
► continued on page 31 



DEBUGGING MACHINE-GENERATED CODE 
CAN BE TRICKIER THAN IT APPEARS 






until load test- 
ing, says Compu 
ware's Varhol. 



With the introduction by Micro- 
soft of the .NET Framework in 
early 2002, and the continued 
evolution of enterprise Java, 
came something that all devel- 
opers thought was a huge bene- 
fit—automated memory man- 
agement. But the benefits of 
automated code generation for -r nese new errors 
what vendors call "all the won 't be evident 
housekeeping and plumbing" 
often can result in defects that 
are more difficult to find for 
developers and QA testers new 
to these technologies. 

Prior to the use of these development 
and deployment platforms, programmers 
manually manipulated the memory of a 
system to implement the functionality of 
a program, according to Peter Varhol, 
product manager for the DevPartner 
development and debugging tool at Com- 
puware Corp. As these new managed run- 
time platforms arrived, such things as 
pointer errors and all the old types of 
memory errors went away, he said. 

The downside, of course, is that new 
types of errors are cropping up that 
developers and QA people are not expe- 
rienced in detecting, resulting in the 



delay of finding these errors 
until later in the life cycle, 
resulting in higher costs to cor- 
rect them and, often, delays in 
getting the application into pro- 
duction. "It's not like they're 
working with C++ code on Win- 
dows or AIX and manipulating 
memory allocation," he said. 
"The platforms are doing all the 
housekeeping. 

"When you are writing code 
that's correct from the stand- 
point of a language specifica- 
tion, you could be creating large num- 
bers of temporary objects that increase 
the memory footprint," he continued. 
The platform, he said, "actually keeps 
objects around too long, making [the 
application] less scalable." 

Developers, he said, more likely than 
not will miss these types of errors in 
functional testing; they will become 
apparent only in load testing. And, in the 
case of proprietary platforms, develop- 
ers and testers might not even be able 
to correct the problem, as they in many 
cases do not have access to the under- 
lying source code. 

-David Rubinstein 
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reduce costs of producing software. 

One way to ease the communication 
between testers and developers is to 
put a tool in front of them 
that uses a common lan- 
guage. "Wouldn't it be more 
effective for QA that the 
same level of information 
gathered during develop- 
ment be recorded during the 
testing phase?" asked Com- 
puware's Mark Eshelby, 
product manager for QACen- 
ter, an automated testing tool 
suite. "You could provide a 
detailed level of information 
for the developer along with 
the defect. Rather than run- 
ning the whole regression test again, 
you can see the methods called and the 
response times. Communicating both 
ways is key." 

Eshelby indicated that Compuware 
will base the next iteration of its Dev- 
Partner tool on Microsoft's Visual Basic 
for Applications, a simple "standard" 
programming language that testers can 
benefit from as well. 

DON'T LEAVE IT TILL THE END 

But what happens when the project 
that had to be delivered in six months 
is not yet complete with only weeks 




More developers 
should be doing unit 
testing, says Auto- 
matedQA's Leahey. 



remaining? Testing gets shoved aside, 
according to the vendors and develop- 
ers alike. 

"Most people believe testing is 
important, but the schedule is out of 
control so what do you cut?" asked 
IBM's Locke. "Not the fea- 
tures. That's the whole point 
of the project. So they cut 
testing." 

Eshelby said companies 
can reduce the risks of failure 
with some test planning, 
which he defined as identify- 
ing the highest areas of risk 
and testing those when the 
time gets tight. But this risk- 
based testing does not pre- 
clude running automated 
tests, he said. "Automation 
still is a great part if you have 
a clear understanding of the risk to the 
business and the risk of failure." 

By designing object-oriented test 
scripts, which allow changes to the 
object to ripple through the tests scripts 
that use it; and data-driven test automa- 
tion, which allows the test automation 
tool to run through new data sets with- 
out scripting changes, Eshelby said last- 
minute changes to code can be made 
with minimal impact on the test envi- 
ronment. "It's not a shift away from 
automation in the quality assurance 
teams, but doing it more effectively" 
that is the goal, he said. I 



DO YOU THINK 

HTTP 

IS THE 

HARD TO TEST PROTOCOL? 
WE CAN HELPf 



Unbiased testing of HTTP intermediaries. 
Rill coverage of RFC-2616 "must" requirements. 

compliancfttHliiB :: pHftmanca faMiefmirkiiQ ::»oirity auditing 












The Measurement Factory 

WWW . HI AHU EI Jd ENJ- FACTO RY . COM 



WARE TESTING 
TRAINING SERIES 




Turn on the Light 

„* and See Ways tjo Test Smarter 

Three Ways to Learn 4, Advance Your Testing: 
train ON Smr 

Save Tra-rel ticpensrf — 

ttMrfeam, Vburfnfjtrt, *our Placi 

LEARN YOUR WAY 
Curtflmlie ti> Taur Tgjm's nce4i — 
HU Spndfli hJiHftEdgE [dps 

COME SEE US 

Train at l-wn'tjcar University — 

Fill 2QD3 5rf iH B*§iHS Deleter ZTUl 



Software Testing Courses: 

letting Computer Software 

Lead Software Test Projects with Confidence 

Creating Excellent Test Project D*CL.men Lilian 

Testing Windows Desktop and Server-based Apollcaliflfii 

Testing AppLi calf oni an the Web 

EMuttive Performance Test Panning and ]mpLetnenLalian 

h:'( .i-iLy Testing fur Wc-U 5iles r Web Applications and Software 

Advanced testing lechnoL&g-ies for Teil Engi" neeft 

Test Automation Planning and. Management 

Test Automation with Win Runnel j 
SiKfeSS fuL AuiAmatian with SiLkTeS-t 111 
TesMng md fesl Automation in Practfce 



FALL 2G03 Series Begins Octoiier 2"i r th 

la register or for mare information: 

Goto- littps/ywww.L^gigear.cisrn/briQl/siftimes/ 

EULLFWEi 1-S0O-322-M33 

ehail training^Lagigearcarri 



h j.Lu^ 'rn: 



Testing 

Applications 

WtiMWeb 



Testing" 
Computer 
Software 






LogiGear 



■»ks Mithared 

Of CQ-iUEhrDred 

bv tofliGfcir 
instructors 



32 



OPINION 



Software Development Times . October 1, 2003 . 



www.sdtimes.com 



EDITORIALS 

Hardware Matters 

It's easy for enterprise developers to fall into the trap of 
thinking about their applications solely from a soft- 
ware-only perspective. Unlike embedded architects and 
programmers, who live intimately with the deployment 
platform, the closest most server-software designers get is 
to the processor instruction set — and even that is hidden 
by managed runtimes, such as Java and .NET. 

Yet the software-only perspective can sometimes be 
akin to tunnel vision, as many complex development 
problems can be more easily performed through hard- 
ware. Consider the new field of XML accelerators. Like 
those SSL and cryptography accelerators that debuted a 
few years ago, XML accelerators can play a valuable role 
in simplifying software design, abstracting a complex 
data-transformation process, and improving overall appli- 
cation performance. 

Yes, everything that these appliances do can be coded 
as software components, or run from a set of standard 
APIs or libraries. But where 's the value-add? Parsing 
XML isn't a business-critical function; there's little to be 
gained by spending hours researching algorithms, coding, 
debugging and tuning a task that would run faster on a 
coprocessor board or network appliance. It's certainly an 
option worth considering. 

Sun Brands Again 

Sun began unveiling its new software branding strategy 
in mid-September, just as this issue of SD Times was 
going to press. Some early aspects of the strategy, which 
we will examine in greater detail in the next issue, are 
worthy of note. 

First, the Sun ONE brand name appears to be fin- 
ished, to be replaced by the new Sun Java System 
brand. Sun ONE itself appeared just two years ago, in 
an earlier attempt to bring cohesion to Sun's jungle of 
software product lines and brand names. Only recently 
did it start to take hold, displacing iPlanet and Forte. 
Now it's gone. 

While the new name more clearly ties Sun's software to 
Java, it may lead to confusion between Sun's products and 
other vendors' Java offerings, especially since Sun, in its 
early marketing pieces, simply refers to the products as 
Java System. For example, the Sun ONE Directory Serv- 
er is now the Java System Directory Server. What Sun 
hopes to gain by focusing on the programming language, 
and not on its corporate identity, is a mystery. 

Second, the company is pinning its hopes on very 
aggressive pricing, apparently offering the entire server 
software stack (that is, Java Enterprise System) for 
US$100 per employee per year, plus another few dollars 
for the desktop software and development tools. 

While this new model is simpler to calculate than serv- 
er-based or processor-based pricing, it assumes that Sun's 
poor market share can be improved through lower prices. 
But given that the Sun ONE stack was already less expen- 
sive than many offerings from BEA, IBM and Oracle, it's 
not certain that cut-rate pricing will inspire developers 
and CIOs to examine or choose Sun's solution. 

It will be interesting to see if competitors feel com- 
pelled to match Sun's pricing, or if cut-rate bargains 
increase the company's Java market share. I 



Technological decisions are 
business decisions. The 
technologies you select should 
allow you to deliver the busi- 
ness values on time and within 
budget. At the same time, they 
should offer maximum protec- 
tion to your IT investments. 

On the J2EE platform, it is 
almost unavoidable that you will 
leverage open-source software. 
However, it may surprise you 
that these technologies, on 
which your IT investments are 
based, are vulnerable to becom- 
ing obsolete at an astonishing 
rate. In particular, I am refer- 
ring to nonstandards-based 
open-source technologies. 

Case in point: Apache's 
Struts framework. 

Apache's Struts framework is 
an open-source server-side 
MVC framework for develop- 
ing Web applications. It was 
created out of need and driven 
by the grass-roots developer 
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community. (In open-source 
slang, developers created it to 
"scratch each other's back.") 
Struts plugs a vital hole in the 
J2EE technology stack. It was 
first available in 2001, and in 
less than a year, it has been 
widely adopted and has become 
the de facto standard in J2EE 
Web application devel- 
opment. 

Like all the other 
successful open-source 
projects, Struts has a 
strong ecology — its eco- 
system includes a rec- 
ognized brand, a dedi- 
cated community, an 
array of third-party 
consulting and training sup- 
port, a large range of books, 
emerging supporting tools 
and, most important, a large 
pool of skilled developers. 
This forms a positive feedback 
loop reinforcing the viability 
of the technology. 
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A good indicator of the 
strength of Struts' ecology is the 
number of books available on 
the market: There are no less 
than seven titles dedicated 
purely to Struts and another 14 
titles covering Struts in one 
form or another. 

Yet, Struts will become a 
legacy technology in less 
than a year. The latest 
JavaServer Faces (JSF) 
specification, which Sun 
showcased together with 
its Rave IDE at the 
JavaOne conference in 
June, offers a superior 
solution that supercedes 
Struts in many respects. 
JSF is a JCP-driven specifica- 
tion for defining and using 
view-tier components for Web 
applications; support of JSF by 
Sun and other large vendors, 
such as Borland and Oracle, is 
likely to become commercially 
available in early 2004. Sadly, 
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IBM'S MAC OS X COMPILERS 

In "Xcode: Apple's Answer to 
Visual Studio" [Sept. 1, page 20, 
or at www.sdtimes.com/cols 
/firstlook_085.htm], it would 
interest Andrew Binstock to 
know that IBM has new beta 
XL compilers for C/C++/For- 
tran specifically for Mac OS X. 
These compilers are based on 
the same ones IBM has 
released for Linux (and AIX), 
and they are optimized for 
their PowerPC 970 G5 chips, 
and thus they should be much 
faster than the GNU compilers 
on the G5. 

(I have not seen PPC 970 
compiler benches yet, but 
IBM has already published 
numbers demonstrating enor- 
mous gains on the POWER4 
with these xlc/xlf compilers.) 
Although these are PPC 970 
optimized, I hear there are 
big improvements on the G4 
as well. 

It's interesting to note that 
the XL compilers are supposed 
to be direct replacements for 
the GNU ones. 

They are currently free in 
beta form from IBM, but they 
haven't released any pricing 
info on the release version yet. 

Eugene Hsieh 

Sunnybrook & 

Women's College Health 

Science Centre 

Toronto 



It was great to hear an unbiased 
review of Apple developer tools. 
I am just about to reinvest in 
Apple, this time as a more expe- 
rienced programmer rather 
than a simple user. While I love 
the products, the only reviews 
seem to come from "true 
believer" testimonials. The con- 
trast to Visual Studio was a 
great way to approach the arti- 
cle. Thanks again. 

Steve Watkins 

Datasweep 

There's some faulty logic to the 
Xcode article, where Mr. Bin- 
stock writes, "If Intel can write 
an optimizing compiler for Lin- 
ux and Windows, surely Apple 
can do so for its platform." 

Intel manufactures and 
designs the chips, so the proper 
company to complain about on 
the PowerPC side should be 
IBM and Motorola. IBM is 
releasing their own compilers 
for the newer G5 and I believe 
had previous compilers avail- 
able. Motorola provides its own 
IDE and compilers through its 
Metrowerks subsidiary. 

If the author wants to lump 
Windows and Intel, then he 
should lump in Mac OS X with 
IBM and Motorola also. 

Gerard Guillemette 

Editors note: Links to IBM's 
beta XL C version 6 and Fortran 



version 8.1 compilers for Mac 
OS X are at www-3.ihm.com 
/ software/ awdtools/ccompilers . 

A comparison of Xcode to 
VS.NET can hardly be made 
based on the description in your 
article. If Apple thinks the opti- 
mization of the edit-compile-link 
cycle is what developers consider 
highest priority, I would expect 
Apple has missed the mark. 

One of the largest advan- 
tages VS.NET has over previ- 
ous IDEs is simply the power 
from IntelliSense and instant 
code navigation and code com- 
prehension afforded by that key 
technology. 

I am currently not an Apple 
developer, but have been look- 
ing to understand the differ- 
ence between the tool plat- 
forms. It would seem that 
VS.NET is several years ahead 
in providing the key abstraction 
developers need most: source 
code comprehension. 

Rob Cecil 

Sagestone Consulting 

There's a sentence in "Xcode: 
Apple's Answer to Visual Studio" 
where Andrew Binstock makes 
an inexcusable error: "Apple 
provides built-in formatters for 
all data types in Carbon (the 
new GUI API) and Cocoa, its 
operating- system interface." 

That is completely wrong. 
Carbon is the Mac OS X API 
for C and C++ that has a coun- 
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JSF is not backward compatible 
with Struts. 

Do not get me wrong. I am 
not saying companies will 
immediately halt developing 
applications on Struts or stop 
supporting Struts. Nor am I 
saying the open-source com- 
munity will abandon its project. 

However, Struts will move 
from growth mode to mainte- 
nance mode, and its ecosystem 
will diminish gradually. Pro- 
ject managers will start consid- 
ering using JSF instead of 
Struts in their new projects 
once it is commercially avail- 
able. Fewer developers will 
proactively equip themselves 
with Struts knowledge, and no 
new authors will write new 
books for Struts. 

There is nothing wrong with 
legacy technologies. (COBOL 
programming is still a strong 
and secured career.) And it is 
nothing new that technologies 
are created, become widely 
adopted, mature and eventually 
give way to newer and better 
technologies. What is stunning, 



however, is Struts' short three- 
year life cycle, given its current 
universal status. 

Technologies with short life 
cycles are not good news to IT 
managers who need to protect 
their IT investments. Is Struts' 
situation unique, or does it 
point to something more gener- 
al? There are two observations 
we can make and learn from. 

First, like many other open- 
source projects, Struts was cre- 
ated out of a real need. Devel- 
opers had projects to finish but 
discovered that some funda- 
mental and essential building 
blocks were missing in the 
J2EE stack. This indicates that 
the J2EE platform was, and still 
is, immature and has plenty of 
room for improvement. 

By observing the number of 
J2EE-related JSRs that mush- 
roomed and the number of 
commercial and open-source 
"frameworks" that flourished, 
we can safely say that Struts' 
proliferation is not unique in 
this aspect. 

Second, Struts is an open- 



source technology that has 
never been a real standard 
endorsed by Sun. Only recent- 
ly have large vendors started 
supporting it, out of strong 
demand from their customers. 
This nonstandard nature is 
the factor leading to its short 
life span. 

In comparison, specifica- 
tions that have been endorsed 
by Sun, such as the JSTL, 
Servlet and EJB specs, have 
stronger commercial and 
open-source support and will 
stay this way for the foresee- 
able future. While these tech- 
nologies do evolve, backward 
compatibility is almost always 
guaranteed and investments 
spent on these technologies 
are protected. 

So, we have a dilemma. The 
J2EE platform is still evolving 
and maturing and has gaps 
here and there. To implement 
applications effectively and 
productively, the most eco- 
nomical option is to adopt 
readily available open-source 
technologies that address 



these shortcomings. However, 
many of these open-source 
projects are not standards- 
based. Using them carries the 
risk that they will become 
obsolete very fast. 

Am I suggesting shunning 
those open-source projects? 
Not at all. These are solutions 
you can deliver now, and the 
lack of support may happen in 
the future. I believe the value 
gained from using these open- 
source technologies outweighs 
the risk. 

What is important is that IT 
managers and developers need 
to be aware of and factor in 
such risk in their decision-mak- 
ing, and always keep in mind 
that the strong ecologies we see 
today may vanish quickly. You 
should be prepared to allocate 
extra in-house resources, time 
and budget to maintain and 
support the systems when such 
days come. I 

John Yu is the co-founder and 
chief scientist of Scioworks Tech- 
nologies Pte Ltd., in Singapore. 



terpart on OS 9. Cocoa is the 
Objective-C API that originat- 
ed from NeXT The two APIs 
provide almost equivalent 
functionality. GUI applications 
can be written to either API, as 
well as command-line tools 
and other lower-level code. 
If anything, the most operat- 
ing-system interface-oriented 
API on Mac OS X is the 
BSD/POSIX layer! 
Chris Reed 

Apple seems to have pulled on 
the seven-miles-boots. The 
great thing here is that Apple is 
exploring outside their home 
territory and is making the 
same good stuff for another 
group of people. 

I am employed as both a 
project leader and developer. 
Our company is Windows- 
based, but together with the 
graphic designer, we are com- 
pletely convinced that Apple is 
the better stuff. 

Too bad for me because our 
designer can buy a Mac and 
already get plenty of software 
for their business. But for me, 
there seems to be no real good 
alternative to Visual Studio. 

So now, I finally get the 
opportunity to compare Apple 
development software and 
Visual Studio — no doubt that 
Xcode will be structurally set 
up better than any other envi- 
ronment. That's what they've 
always done — they take more 



time but come with better 
products. 

Marijn Geelen 

Holland 

DON'T BLAME SCO 

In your Aug. 15 editorial "Inno- 
vation v. Litigation" [page 26, or 
at www.sdtimes.com/opinions 
/opinion_084.htm], why would 
you excoriate SCO for trying to 
defend its intellectual property? 

While it is true that Linux 
has moved innovation along, 
violations of law must be 
prosecuted. Linux may be a 
media and programmer darling, 
but if it contains IP belonging 
to SCO, then everything should 
stop. Period. 

And in the Industry Watch 
column written on the same 
date ["Howdy, Partners," page 
34, or at www.sdtimes.com 
/cols/industrywatch_084.htm], 
David Rubinstein warns us to 
watch out for Microsoft's 
response to "the open-source 
community, which is develop- 
ing a free version of the com- 
pany's .NET Framework and 
Common Language Infrastruc- 
ture" and "letting Java devel- 
opers... write code that can run 
on .NET" 

What??? If I understand 
correctly, Microsoft spends 
$billions yearly on R&D. Why 
should they give it away? 

Finally, is open-source a 
panacea for everything? I am 
tired of columnists vilifying pro- 



prietary software just because it 
is not "open-source." 

Rod Spode IV 

Senior VP & CTO 

Manchester Laser & Optics 

Manchester, England 

GO AHEAD, BLAME SCO 

In regard to "SCO Wants Linux 
Users to Pay" [Aug. 15, page 1, 
or at www.sdtimes.com/news 
/084/story3.htm], SCO has 
stated that there will be no 
refunds of licenses if the 
company fails in its legal 
attack on open-source soft- 
ware, to steal copyrights to the 
Linux kernel. 

I could sell you the Golden 
Gate Bridge the same way, but 
is it legal to sell something you 
do not own? How can SCO not 
be arrested for fraud? 

Norman Madden 

LEARN THE TOOL 

In regard to "Real Time Java 
Takes Flight" [Aug. 1, page 26, 
or at www.sdtimes.com/news 
/083/speciall.htm], I think 
that like with all languages, 
you need to learn how to use 
the tool. 

I'm an ex-programmer of 
Fortran IV and JPL's Fortran 
V, and we used it to the maxi- 
mum. We used it for computer 
graphics, being in a drafting 
area. When we look at pro- 
gramming up to the mid- 
1990s, the PCs were very slow 
compared to what we have 



now. My opinion of software 
is, how fast is the hardware? 
The point is, will the hardware 
respond to the abilities of the 
software? If it doesn't, then 
it works! 

Also, how good is the pro- 
grammer? That says it all. As 
was in Fortran, you can IF con- 
dition yourself to death. 

Jose Miranda 

NASA Jet Propulsion 

Laboratory 

CORRECTION 

A story that appeared in the 
Sept. 1 issue incorrectly indi- 
cated that the WS -Transaction 
and WS-Coordination Web 
services specifications have 
been accepted by the Organi- 
zation for the Advancement of 
Structured Information Stan- 
dards. Those specifications 
have not been submitted to 
OASIS. 



WHAT DO YOU THINK? 

SD Times welcomes feedback. 
Letters should include the 
writer's name, company affili- 
ation and contact information. 
Letters become the property 
of BZ Media and may be edit- 
ed for space and style. 

Send your thoughts to 
feedback@bzmedia.com, or fax 
to +1-516-922-1822. Please 
mark all correspondence as 
Letters to the Editor. 
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INTELLECTUAL PROPERTY INSURANCE 



Excuse me as I put away Java for 
today, to discuss intellectual proper- 
ty Like many in the industry, I've been 
studying the SCO lawsuit; I've also done 
research on the legal issues behind IP. A 
pattern has emerged: One of the biggest 
factors in who wins and who loses in IP 
lawsuits is who runs out of cash first. It's 
that simple. 

Truth and proof? They're both good 
and fine, but not sufficient. IP litigation 
is like poker. If you don't have the mon- 
ey to see your opponent's raise, you'll 
still lose no matter what you have in 
your hand. 

And what does that have to do with 
software development? Everything. 
Let's say you've patented a process, 
copyrighted some code, or just plain 
own a program. Then you find someone 
else is using that code or process with- 
out permission. You ask them to stop 
doing that, or request a licensing fee. 
What if they don't comply? What if they 
sue you? 

Sue you? Sure. They might claim that 
you are interfering with their business 
by making your outrageous claims that 
their program, containing all their own 
work, somehow violates your rights. 
You — yes, you — are the culprit. By 
requesting compliance with your IP, 



you're now accused of violating someone 
else's IP rights. 

Whether you're sued or simply can't 
collect, you may need to go to court, or 
at least threaten legal action, to settle 
the matter. Priced any lawyers lately? 
Good litigators, attorneys who special- 
ize in fighting things out in court, 
aren't cheap. You thought a top-shelf 
J2EE senior software architect 



was expensive? Ha! Just wait 
until you see your legal bills. 

Of course, if you have the 
resources of a deep-pocketed 
giant (like IBM, Microsoft or 
Sun), that's not a problem. 
You can afford to bring the 
issue all the way up to the 
Supreme Court if you must. 
Or, if you can get a well-known 
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firm (like SCO appears to have with 
Boies, Schiller & Flexner) to agree to 
represent you on a contingent basis, 
you're golden. 

But let's get real. You probably 
don't have millions available for pro- 
longed IP battle, and unless there's a 
likelihood that you can recover mega- 
damages, your chances of getting best- 
of-breed representation on a contin- 
gency basis are somewhere between 
slim and none. 



What's the downside? You can 
lose an IP case, your code and your 
company if you have the misfortune 
to run into a sufficiently vicious and 
well-heeled opponent. So, what can 
you do? You can check into getting IP 
insurance. 

IP insurance will pay up to 80 per- 
cent of your court costs. Essentially, it 
will provide you with the ammo you 
need to fight an IP battle. 

IP insurance is specialized. You're 
not going to be able to get it 
from your friendly neighbor- 
hood insurance broker. Chuck 
Baxter, staff attorney and 
insurance underwriter for 
Intellectual Property Insur- 
ance Services Corp., an IP 
insurance firm that specializes 
in small-to-medium-sized busi- 
nesses, said, "IP policies are 
not blanket policies, and there are no 
standardized forms. IP insurance is 
specialized, and there are many prod- 
ucts out there." One thing you can be 
sure of, though: Your normal business 
insurance is not going to cover any IP 
claims. If you're not sure, ask your cor- 
porate counsel. 

You also can't wait until a lawyer is 
knocking on your door to look for cov- 
erage. "In order for there to be cover- 
age, we must look at the product," Bax- 
ter said. "Pre-existing conditions aren't 



covered. If your house is on fire, it's too 
late to get fire insurance." 

This kind of insurance doesn't come 
cheap either. Matt Jacobs, head of the 
insurance practice group at the Wash- 
ington, D.C., office of national law firm 
Kirkpatrick & Lockhart, observed, "IP 
insurance is unique to each individual 
and company. These policies must be 
hand-crafted — manuscripted in insur- 
ance jargon — for each customer." Typ- 
ically, this means "IP policies have a 
very short front part, and lots of 
amendatory endorsements that actual- 
ly create the policy." And that, in turn, 
means IP insurance is expensive. 

It's all complex. Jacobs recommends 
that you hire an IP insurance-sawy 
lawyer to negotiate your policy. If you 
get a policy that doesn't cover your 
exact needs, you may find that you've 
spent a small mint on a policy that lets 
you down when that proverbial house 
catches fire. 

Is it worth it? If you think your 
intellectual property may be in danger, 
or that you may be in danger for your 
use of intellectual property, it could be 
the difference between your software 
making your company or sinking it. I 

Steven }. Vaughan-Nichols is editor of 
Practical Technology (www.practical- 
tech.com) and has worked as a program- 
mer for NASA and the Dept. of Defense. 



KNOWLEDGE 
MANAGEMENT 




; Sun's JCP 
Releases 



\tm tw±n!rt Nh^heh 'v If.mrt n*i*1=ffrw--il Mmwfm 



J2EE 1.4 





■ Ykll DIH fiF 


ft \MWTi WTO 


■ \-.j- 






..k-.i ... m : 




Mtaib 


i 


-> mi ■ 




'^^zr^: 




f ]ir»i 


- J..'." ~*^~ 












* 


ZZ r ~77\,~^^ 


"''"it ~ 




■' ' l 


*• 


B 


■j": 




5Lt^ 




m 






■> l 


n 






~~^T 


Ti 


I 


** M* 






ss=~- C--> Builder K:Dacli With d VcnqeiKtce- imm 

s^zi. ^ j«*i»m^™*A««*«"rwri«™ji«.'wiPi STEPS DOWN 



.J urn im .m m | _ '%.* - r-i L u —J 


— -■—■*—» ■-•— -■•«i»- 






■i*haWi_afapai<fcal r ...I-""!. ti_ !. 



M 



www.sdtimes.com 





jJjCoarrli* L 1 * 8 *?™? 



Gigabytes of Text 



Search across networks, inlranels, and web sites 
* Publish large document collections to web or CD/DVD 

* dtfh luu drain Indtiad, unlnkxEdJIaldtd andliH-LiaLtnartti upllDU 

4 hiqliliyliMiils - HTMI i-il PDF while f s - JY' n L -~ -"dd-d linfcj tanngfllnnnidlEr™?! 

* cd warts rtfir tiio trora wcri prrjewiDr, dtfitnw, mrndshaui. tnqii . IW. W.. 
rtc.-tD Mil* tordi^wilhtiipiiigfitid Mi 

products Urn HEjf hirand-bHBB setup, jpllanil Aft 



"Cfriinandota 



cnglnM" 






\r, !lm -J a si puzf jlnnt, «mc 
Jnlf ul Ihc currurt Fvrha 1 * 11 
inn furshassU 



ch-nnl 






''Virjf pn mi-Til _.. ■ ttugqini 
rfltppjitsuirGh" 



"ipppfrftalljrfl^ilEiB "ngine 
..-. iffnrltn tanm Pf 1 
hml pi UtillivfiPP II 
dWm" -«U 

"P." inmnm *»r 

fontittr 

"l«rtri6» Si Silting 
■HA" -Ha n d L ! t: M wsa u't r 

wHw.dEsuarch.Cflffltor 
+ - y *u ii -■ rv«i a i i r.i ;±'j r « n n * 

1-eaa-iT-FiNDS 









dl5*ardi 






Retrieval 
Engine 

■■ far tinhM 
i rtl 1 tor pricing 





Desktop 



Spider 

ftiirr Desktop. 
Normvorkvid 



Network ThB Smrt Chplcfl f pr 
r -jy n f«w Twt RnlrinTar sin cd 1 B1J1 




MP E toO 




/ 




Will' ah a l-new Application Manager and 
, . . , , T , , enhanced tod &eL (inducing a Farm 

Woffcspad&j and Editor), Open Insight has entered Vie ring o : rnainsVea-Ti 
App icaton Development Tools for the Small and M*J-si2&d Busil^s world. With 
u ^Ol 'or developers that bec-L^nes prof! Lab e h only a fert« wee'ks, *io othe* Lao 
Can Nonpars with Oper Insight 7.0. 

The new Application Manager may be radkti ly diJfWertL fFtirn previous versions. 
bLt all exiting structures - Windows, PopLos, N essay es, Reports and Pxsg,rams - rerr-iair 
the- san'-e and do r«l reed nett ratonipilations or charges. Application Developers wi I be 
able to tfeate Scalable, efclensib-e, robust applications in a Fraction of thw tim» that i* takes to 
create them bsiry otheE dewlopnien; LooL : . 

Witfi built in Web and XML func'Jona i'.y. Qoenlnsighl already suppl us you ^Lh 1^ 
txLe'istuiliLy y^j reed in todays competitive bjshess woHd. QoenlnSight'sClienl/S^ve" tools 
feature a querji window, a SQL sciipt-build'rig assistant, a database connection builder u 7 id u 
DataSet Ob^cl defaiition tool to let you access data sources tfther than our own CpenlnsigT. 
also gives you data wa'ehousino at its *nest Tike yoL r pick ■ SQL, ODBC, Noltra of Oracle. 

Plus, our new natve Lintix oui d ul -l/ivs yoLr applications Lo go cross- olatforrn easier Ltian 
aver - btlild yfrjr application on your plaform of choice., ard deoloy i: without, thany^s. 

r." 1 1 ■ ■ j ■ L* " i ■". ■"■ i -. iv:- jboLl Cl^'-L s ;j'iL. u_i SuIlIV Purlrur "■■j;j , u"i i :." Cjl* Ts^i. 
training classes a L Revelation Headquarles or -j ic i;l -a-Jf Authorised Trahing Centers (ATCs/, 
go /j www.rfcvolationxom/sdt/sdt'ioritf ^ cu SOC 262 ^7-7. 




Revelation Offices - Global 



RtYfiLfltfbn Software-. Inc 

CorpDntd H*»dqjart*™ 

V? ^rd^Hrwilt Kwd, lit Fbtir 

WcstwMd, NJ IW5 

loll Nr*fl: (ftOO;i Wtf-4 W 

PhonesraonS^fl-lfla 

rM:(ZaiJ 723-981 5 

h iiml lnfo0r0HllfcPL.GPH 

Web: wwA-.rch-clslioi.ccrn 



*;C'.''ll-"I L'Y SO"tWu r 4 L"J 

1 1 The Pare-ncnt 
Papa* li'ift. Fnl "if. 
Uv.dr Wi ^N^rLX 
Phdhc: ♦iJlO'iZCe 3]2 "HO 
Ki. i44C0iia(»B3J^ftl 
Et^mI: iri&flk-evrofc.&G'.ulL 
Wefa: www.rnvtott.ca.Lk 



R«vtl«tkn Soitwn AuietuIla Pty Ltd. 
-j-iir ? 

31 &d PiD^!# Rd. 
3raakwi!t, N5W21CO 

A:IUPiL,l 

"A^ab AwwruviflaL : yri-- 5 -twnrc.c2n.nu 



Revelation 






'■*1YI. 



www.sdtimes.com 



Software Development Times . October 1 r 2003 



COLUMNS 



37 



JAVA EYE FOR THE .NET GUY 



When it comes to cross-cultural pol- 
lination, .NET programmers could 
learn a lot from the Java worlds half- 
decade of writing managed code. Of 
course, there are those who've accused 
.NET of being a rip-off of Java from the 
start, but as .NET has become more 
familiar and the "Tiger" release of Java 
reveals that learning from the competi- 
tion is a two-way street, those voices 
have begun to quiet. 

I'm not even talking about Redmond 
keeping an eye on Java (believe me, 
there are people at Microsoft who know 
just about as much as anyone about the 
internals of the JVM), I'm talking about 
corporate and shrink-wrap developers 
who haven't kept abreast of the software 
development trends that have been dri- 
ven, frankly, primarily in the Java and 
open-source worlds. 

Here's an observation: There are 
lots of things that boost programmer 
productivity more than object orienta- 
tion. That's a difficult statement for me 
to make — I have been a longtime 
object-oriented zealot and continue to 
feel strongly that it's the best known 
way to think about complex program 
structures. 

But a few months ago, when I dipped 
my toes back into C++ for a project tar- 
geting the ever-elusive Microsoft Smart- 
phone, it wasn't the procedural nature of 
the APIs that slowed me. As a matter of 



fact, it was kind of a blast revisiting the 
oP Windows API. I even dusted off my 
copy of "Win32 Programming" by Rec- 
tor and Newcomer and found it as valu- 
able as ever. 

What killed me was an issue with 
resource management that touched on 
two of the real productivity wins in 
managed code: garbage collection and 
explicit stack traces when exceptions 
are thrown. (OK, the whole 
"const correctness" thing also 
slowed me down.) If I were 
programming in C + + on a reg- 
ular basis, I would strongly lob- 
by for the use of Managed C + + 
where feasible; the task of 
learning 14 new keywords is a 
fair price to pay for the produc- 
tivity benefits of structured 
exceptions alone. If you do switch to 
Managed C++, Richard Grimes' "Pro- 
gramming with Managed Extensions 
for Microsoft Visual C + + .NET" (my 
nominee for Overly Literal Book Title 
of the Year) will get you up to speed in 
just over 500 pages. 

Most experience with agile methods, 
including test-driven development, 
Extreme Programming and the like, has 
been in the Java world. In the Java 
world, for instance, there is a much 
higher awareness of the benefits of unit- 
testing tools. If you haven't downloaded 
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sounds like a burden at first, but once 
you've worked with a comprehensive 
test suite on a nontrivial project, you'll 
look at a lack of unit testing as down- 
right negligent. 

Less dramatically, NAnt allows you 
to customize your build process (in- 
cluding firing up that test suite) in a 
way that's much more intuitive than 
makefiles. Pair programming works 
better in the Windows world: Using 
NetMeeting is actually not a bad way 
to share a screen without literally 
bumping elbows with your 
partner. I'm still dubious about 
pair programming, even though 
I enjoyed it more than my 
partner did. (Does that indi- 
cate that I'm a selfish pro- 
grammer?) 

Finally, and this is the area 
that I most wish has some 
impact: The Java world is a real 
community. Microsoft bends over 
backward in order to try to create com- 
munities, but the Java and open-source 
communities are more organic. 

Perhaps this is just an accident of 
history, a reflection of the longer time 
that Java and open-source projects 
have been around, as well as an artifact 
of a time when hanging out and 
enthusing about technology paid well 
(and went by the name "business 
development"). 

With GotDotNet and other sites in 
"The .NET Code Wise Community," 



NUnit yet, stop and do so. Unit testing Microsoft's presence is palpable and 



can be somewhat stifling, like a sanc- 
tioned school event where the princi- 
pal is sitting in a corner reading a mag- 
azine. It's in the blogsphere that there 
seems to be evidence of this trend fad- 
ing, with enthusiasts like Loren Heiny 
(journals.tuxreports.com/lch) single- 
handedly doing more for the Tablet PC 
than Microsoft's marketing depart- 
ment, and Microsoftians like Chris 
Brumme, Eric Gunnerson, Don Box 
and Rebecca Dias (all available at 
blogs.gotdotnet.com) getting on the 
Cluetrain and giving human voice to 
.NET technology. 

The fact remains that actually meet- 
ing people face-to-face is the key to 
building a community. Now that the 
fall conference season is under way, I 
urge you to resolve to attend at least a 
local conference. Even if all you can 
swing is a "show-only" pass, you'll have 
a chance to talk to other programmers, 
see some new products, and make a 
contribution to the entire software 
development community. And, hey, if 
meeting friends doesn't interest you, 
surely you will get yourself a T-shirt 
and a free beer. 

Free beer — that's something else 
that's more common in the open- 
source community than in the .NET 
community. I 

Larry O'Brien is an independent tech- 
nology consultant and analyst, and the 
founding editor of Software Develop- 
ment Magazine. 



ISVs SHOULD NOT REWRITE CODE 



Anew book from Apress describes in 
detail the follies of the early PC 
industry. Titled "In Search of Stupidity: 
Over 20 Years of High-Tech Marketing 
Disasters" (by Merrill R. "Rick" Chap- 
man), it discusses the rise and fall of 
companies like Ashton-Tate and Micro- 
Pro and products such as OS/2, the PC 
Junior as well as other icons of the 1980s 
and early 1990s. The author, who 
worked as a marketing consultant at 
many of the companies he skewers, is 
long on insider details that illuminate 
the behind-the-scenes fumbling. For 
those of us who remember Ashton-Tate's 
Ed Esber, the book is eminently read- 
able. For those to whom his name is a 
mystery, the book will fill them in about 
this remarkable period. 

On the other hand, the book is a bit 
short of analysis, and what analysis there 
is tends to accentuate the author's per- 
sonal experience with the companies. 
However, Chapman does make one 
deeply incisive observation: Many of the 
catastrophic failures occurred when ven- 
dors decided to rewrite their core prod- 
uct. Invariably, this decision led to huge 
product delays that enabled competitors 
to steal market share. Often, it led to the 
companies' demise. 

A typical rewrite disaster occurred at 



Borland when it decided to redo its 
well-liked Paradox database and turn it 
into an object-oriented product. (Not an 
object-oriented database, mind you, but 
a regular DBMS rewritten to use 
objects internally. This was right after 
Borland contracted object fever.) The 
result was a database product that was 
late, incompatible with previous 
versions, and had an entirely 
new object-oriented-scripting 
language. Needless to say, Para- 
dox sales vanished; shortly, it 
became irrelevant. 

A more-current example was 
Netscape's decision to com- 
pletely rewrite its browser. For 
three years— 1998 to 2000— 
Netscape was technologically silent. By 
the time the new version shipped, the 
famous "browser wars" were over and 
Internet Explorer had completely tak- 
en over. 

The book's epilogue delves into the 
topic of costly rewrites in an interview 
with Joel Spolsky, a pundit on software 
development who is remarkably perspi- 
cacious given his comparative youth. He 
points out that the decision to rewrite is 
too often driven by programmers who 
claim the existing codebase is junk and 
should be replaced. 
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Says Spolsky: "This happens because 
it's harder to read code than to write it. 
A programmer will whine about a func- 
tion that he thinks is messy. It's sup- 
posed to be a simple function to display 
a window or something, but for some 
reason it takes up two pages and has all 
these ugly little hairs on it and nobody 
knows why. Those are bug fixes. One of 
them fixes that bug that Jill had when 
she tried to install the thing on a com- 
puter that didn't have Internet 
Explorer. Another one fixes a 
bug that occurs in low-memory 
conditions. That LoadLibrary 
call is sure ugly, but it makes 
the code work on old versions 
like Windows 95. When you 
throw that function away and 
start from scratch, you are 
throwing away all that knowl- 
edge. All those collected bug fixes. 
Years of programming work." 

Spolskly recommends — wisely, I 
believe — when programmers storm into 
your office saying that code must be 
rewritten, that you ask the programmers 
for a written explanation of what the 
rewrite will deliver that cannot be deliv- 
ered by modification to existing code. 
Add to this a schedule and a cost projec- 
tion, and it quickly becomes difficult to 
justify any complete rewrite — even if 
you disregard the competitive disadvan- 
tage at which it puts the company. 
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Of course, the company must have 
made sensible decisions so that a 
rewrite is not flat-out required. Consid- 
er, for example, WordPerfect's epony- 
mous word processor. The prohibitive 
market leader was forced to update its 
code to adopt a GUI for OS/2 and Win- 
dows. However, because its flagship 
product was written in assembly lan- 
guage, the update became a rewrite. 
And it took so long that Microsoft's 
Word gained important mind share and 
momentum. (It didn't help that Word- 
Perfect committed its resources pri- 
marily to the OS/2 version and secon- 
darily to Windows. However, even in 
this wrong emphasis, the assembler 
aspect compounded the costs of the 
misjudgment.) 

Rewrites tend to be less of a compet- 
itive issue in IT than at ISVs; however, 
they still come up all the time. Y2K 
cleared out many projects that needed 
rewrites. So, today, the projects that 
really need a slash-and-burn remake 
should be few. Make sure you know 
what you're doing, why you're doing it, 
what the dollar cost will be, and what the 
competitive costs will be. If done cor- 
rectly, this analysis should prove illumi- 
nating and the results heavily tilted 
against rewrites. I 

Andrew Binstock is the principal analyst 
at Pacific Data Works LLC. 
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CONSIDER THE SOURCE 



In what he called an "Open Letter to the 
Open Source Community" dated Sept. 
9, SCO Group chief executive Darl 
McBride makes two serious charges. 

The first is his claim that SCO was 
the subject of denial-of-service attacks 
promulgated by a hacker from the open- 
source community. He asserted that 
Eric Raymond, an admitted "accidental 
revolutionary" and author of "The 
Cathedral and The Bazaar" and 
"The New Hackers Dictionary," 
had contact with the attacker 
and that Raymond called the 
attacker "one of us." 

The second is his claim that 
open-source advocate Bruce 
Perens has admitted that Unix 
System V code, owned by SCO, 
has been incorporated into Lin- 
ux and should not have been. McBride 
charged that a Linux developer on the 
payroll of Silicon Graphics stripped 
copyrights from System V code and con- 
tributed that code to Linux. In short, 
that developer claimed that SCO's code 
was actually developed and owned by 
Silicon Graphics. 

A joint response from Perens and 
Raymond counters that McBride s letter 
is full of falsehoods. Meanwhile, each 
man has published on his Web site a 
rebuttal to SCO's claims that proprietary 
Unix source code has made it into Linux. 

Without getting into the "he said, she 
said" of the arguments, I believe both 
cases have merit. Here's why. 

The open-source community has tak- 
en the position that there is no propri- 
etary code in Linux. That said, the major 
Linux players have tried to get to the 
root of the matter, telling McBride, 
"Show us the offending code, and we'll 
take it out." It's that simple. 

SCO has responded by revealing the 
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offensive code only under cryptic, secre- 
tive nondisclosure agreements, continu- 
ing to evade the direct question, and 
denying the open-source community 
any opportunities to identify and remove 
potentially offending intellectual prop- 
erty. Its motivation seems less about pro- 
tecting that IP than it is about offering 
"protection" to Linux users by selling 
licenses that would remove them from 
any liability from future SCO 
lawsuits. Sounds like SCO is try- 
ing to make Linux users an offer 
they can't refuse. 

Meanwhile, the points raised 
by McBride cut right to the heart 
of why true community-created 
and maintained open-source soft- 
ware will never gain direct and 
widespread adoption in the busi- 
ness world without backing from a major 
vendor, such as IBM or Red Hat. 

To corporate America, the folks that 
make up the open-source community 
are seen as a bunch of yahoos and rene- 
gades, hackers who don't conform to 
the same rules that businesses do and 
in whose hands these businesses cannot 
be trusted. They want to buy software 
from a known vendor with contracts for 
support and upgrades, and not be left 
to the whims of a seemingly undisci- 
plined rabble. 

The mere fact that McBride can 
accuse hackers of disrupting SCO busi- 
ness — which was acknowledged in the 
Raymond/Perens rebuttal letter, although 
Raymond claims he did not know the 
identity of the hacker — is one more rea- 
son for businesses not to adopt Linux as 
the foundation of their business. 

If I'm a company thinking about bas- 
ing my business on open-source soft- 
ware, I'd think twice. What would be the 
potential ramification if I made a soft- 



ware decision that was unpopular with 
the community that was supporting my 
applications? Would they deny me sup- 
port? Worse, would they try to sabotage 
my operation? Hack my Web site? Flood 
my routers? 

If they can wreak havoc with SCO's 
operations with DoS attacks, how can, say, 
IBM be certain that hackers won't try to 
undermine its Linux efforts if IBM 
decides to "value-add" something the 
hacker community doesn't like? 

So, IBM and other Linux vendors will 
continue to distance their offerings from 
the free Linux available on the Internet, 
creating different flavors of Linux — Linux 
for embedded systems, Linux for main- 
frames, Linux for server farms. 

Wait, isn't that what happened to 
Unix, and isn't the argument over code 
ownership what got us to this point in 
the first place — fragmentation, and Lin- 
ux distributions based on different code- 
bases? There's the UnitedLinux Consor- 
tium's idea of Linux — that's the group 
formed by four struggling Linux vendors 
in an attempt to "standardize" the base. 
However, Red Hat and IBM are not part 
of that, and sell different versions of the 
operating system. 

Soon, what business calls Linux won't 
be a community operating system at all, 
but merely one vendor's offering based 
on the common kernel, with commercial 
support and extra features built in. 

Linux users have come to the point 
where they are putting their trust in 
the companies that sold them the soft- 
ware, not in the community of hackers 
and others that are working on the ker- 
nel, or maintaining a pure, open ver- 
sion of Linux. 

Raymond's open-source bazaar is 
becoming marginalized, relegated to a 
back corner of the cathedral parking lot. I 

David Rubinstein is executive editor of 
SD Times. 
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DATA WATCH 

The overall server market grew substantially in the second quarter 
of 2003, says a new report from International Data Corp. According 
to IDC's Worldwide Quarterly Server Tracker, the market halted a 
nine-quarter decline on a year-to-year basis, with unit shipments 
rising a dramatic 17.5 percent to more than 1.2 million units. Rev- 
enue, however, grew by only 0.2 percent. 

IBM reclaimed the top spot in the worldwide server market, with 
a 30.4 percent share in factory revenue. Hewlett-Packard, which 
had been on top in the first quarter due to its merger with Compaq, 
fell to second place with a 27.7 percent share. Sun, Dell and Fujitsu 
Siemens took the next three positions. 

Within this category, however, IBM, Fujitsu Siemens and Dell all 
showed strong growth, near or exceeding 10 percent year-on-year. 
HP's growth was much smaller, at 0.4 percent. According to IDC, 
Sun's server revenue declined by 18.7 percent. 

The worldwide Unix market declined by 5.2 percent in the second 
quarter— considerably less than the 12.7 percent decline showed in 
the first quarter. According to IDC, the Unix market is the largest seg- 
ment of the overall server market, representing more than 40 per- 
cent of all revenue spent on servers. 



Microsoft Corp. will pay Be Inc. US$23.2 million to 
settle an antitrust lawsuit filed in February 2002. 
Under the terms of the accord, Microsoft admits no 
wrongdoing and Be agrees to pursue no further liti- 
gation. Be, which is in the process of dissolution, will 
distribute the cash to shareholders of record as of 
March 15, 2002, after paying salaries, expenses and 
clearing up all outstanding liabilities . . . Data inte- 
gration solution provider Informatica Corp. has 
entered into an agreement to acquire mainframe 
integration solution provider Striva Corp. in a cash 
and stock transaction worth about US$62 million, the 
companies have announced. Striva, which is private- 
ly held, has developed technology for high-speed 
bulk data movement and real-time change capture 
that Informatica has licensed and branded as part of 
its PowerConnect product line for more than two 
years . . . Ascential Software Corp. has completed 
the acquisition of Mercator Software Inc. and will 
expand its Enterprise Data Integration Suite for 
transactional, operational and analytical require- 
ments. Ascential purchased about 33 million shares 
at US$3 per share to complete the transaction. I 
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Enterprise Architect Oct. 12-14 
Summit 

Palm Springs, Calif. 

FAWCETTE TECHNICAL PUBLICATIONS 

www.ftponline.com/conferences/eas 

Symposium/ITxpo 2003 Oct. 19-24 
Orlando, Fla. 
GARTNER INC. 
symposium.gartner.com 

UML 2003 Oct. 20-24 

San Francisco 

ACM AND IEEE COMPUTER SOCIETY 

www.umlconference.org 

Ascential World Oct. 26-28 

Miami 

ASCENTIAL SOFTWARE CORP. 

www.ascential.com/ascentialworld 



Microsoft Professional 
Developers Conference 

Los Angeles 
MICROSOFT CORP. 
www.microsoft.com/pdc 



Oct. 26-30 



00PSLA 2003 

Anaheim, Calif. 

ACM SIGPLAN 

oopsla.acm.org/oopsla2003 



Oct. 26-30 



Mac OS X Conference Oct. 27-30 

Santa Clara 

O'REILLYS ASSOCIATES INC. 

conferences.oreillynet.com/macosx2003 

STAR West Oct. 27-31 

San Jose 

SOFTWARE QUALITY ENGINEERING 

www.sge.com/starwest 



Borland Conference 

San Jose 

BORLAND SOFTWARE CORP. 

info.borland.com/conf2003 



Nov. 1-5 



For a more complete calendar of U.S. software devel- 
opment events, see www.bzmedia.com/calendar. 

Information is subject to change. Send news about 
upcoming events to events@bzmedia.com. 
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Rational helps you easily and effectively develop software for an on demand world. Thiough proven best 
Ices and its software development platform, Rational helps your team quickly build, customize and 

cgrato a ppii cat ions. Decisions ana fasi and in formed. Project managa mont becomes mote manageable. 
Development goes from painful to predictable. For a free CD with demos, visit lbm.com/ratlonal/BeeitwDr1c 
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Dob Codings 
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"The difference between manual coding and uiing 
TOAD is like comparing riding a motorcycle 10 walking. 
My job demands that I Juggle development and testing 
with database adminisi ration, and only TOAD lets me 
do it all, That's why I start off each day with TOAD.' 

Get to know TOAD — visit www.quesLcomysdtimes 
today for a free walkthrough and see why mote than 
300,000 Oracle pros use TOAD. 
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TOAD: Suild Better Code Faster 




